89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c | Triage

Resubmissions

28-12-2022 03:41

221228-d8w4gscd5x 10

09-04-2020 14:52

200409-4eb6rljnsx 10

Analysis

max time kernel
106s
max time network
92s
platform
windows7_x64
resource
win7v200217
submitted
09-04-2020 14:52

Sharing

Report Analysis Logs

General

Target

89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls
Size

111KB
MD5

c7f273947124d844d77b7c376a9393b4
SHA1

3497bea7fbb12fa3d62fce071fdb22ca53bfbddb
SHA256

89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c
SHA512

b44a5e25276cb98cffa8a5d815d1802e817101cf028216761efb85f65610da2af1741f549fa7738985650dda8727bb7ccc1f36e5ac8baf2fc2ec004bf2c07b0d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1828 EXCEL.EXE
Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

EXCEL.EXE

pid process

1828 EXCEL.EXE
1828 EXCEL.EXE
1828 EXCEL.EXE
1828 EXCEL.EXE
1828 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1828-0-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download
memory/1828-2-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download