a83890bbc081b9ec839c9a32ec06eae6f549a0f85fe0a30751ef229a58e440af | Triage

Analysis

max time kernel
107s
max time network
68s
platform
windows7_x64
resource
win7v200217
submitted
09-04-2020 15:04

Sharing

Report Analysis Logs

General

Target

a83890bbc081b9ec839c9a32ec06eae6f549a0f85fe0a30751ef229a58e440af.xls
Size

110KB
MD5

b8950f584f821b04370a54090b1ef385
SHA1

5dd0e43b7b8da2c18645622c8d749a52bafb75ec
SHA256

a83890bbc081b9ec839c9a32ec06eae6f549a0f85fe0a30751ef229a58e440af
SHA512

4423515e09aaccd3fdc21e8d050f77980b61c86bdbd8d222e66fb4f44c4fed4907852b5b4ce24e86ec329818cb13cd0ceb6eea07ff2956f25f92d49288611cc8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1852 EXCEL.EXE
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

EXCEL.EXE

pid process

1852 EXCEL.EXE
1852 EXCEL.EXE
1852 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\a83890bbc081b9ec839c9a32ec06eae6f549a0f85fe0a30751ef229a58e440af.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1852-0-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download
memory/1852-2-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download