Analysis
- max time kernel
108s - max time network
115s - platform
windows7_x64 - resource
win7v200410 - submitted
15/04/2020, 14:53
Static task
static1
Behavioral task
behavioral1
Sample
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
Resource
win7v200410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
Resource
win10v200410
0 signatures
0 seconds
General
- Target 5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
- Size 192KB
- Sample200415-ge3z646ttx
- SHA256 5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19
- MD5 bf1efbdca05fab7682b9da5b800c2d4c
- SHA1 e57949811523eed8ab9321394a537bb909eaa7e7
- SHA512 4ba1b206c2085926972d87d044b770394443b129e707c8f396725597b36a9cb4f7be5de7a9026d579331d6af5a3365d74e3cfe1148420010a2625c7681ed8b07
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2024 EXCEL.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2024 EXCEL.EXE 2024 EXCEL.EXE 2024 EXCEL.EXE 2024 EXCEL.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:2024