Analysis
- max time kernel
106s - max time network
92s - platform
windows7_x64 - resource
win7v200217 - submitted
09/04/2020, 14:52
Static task
static1
Behavioral task
behavioral1
Sample
89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls
Resource
win7v200217
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls
Resource
win10v200217
0 signatures
0 seconds
General
- Target 89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls
- Size 111KB
- Sample200409-4eb6rljnsx
- SHA256 89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c
- MD5 c7f273947124d844d77b7c376a9393b4
- SHA1 3497bea7fbb12fa3d62fce071fdb22ca53bfbddb
- SHA512 b44a5e25276cb98cffa8a5d815d1802e817101cf028216761efb85f65610da2af1741f549fa7738985650dda8727bb7ccc1f36e5ac8baf2fc2ec004bf2c07b0d
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1828 EXCEL.EXE - Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1828 EXCEL.EXE 1828 EXCEL.EXE 1828 EXCEL.EXE 1828 EXCEL.EXE 1828 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\89e6e635c1101a6a89d3abbb427551fd9b0c1e9695d22fa44dd480bf6026c44c.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1828