Analysis
-
max time kernel
108s -
max time network
115s -
platform
windows7_x64 -
resource
win7v200410 -
submitted
15-04-2020 14:53
Static task
static1
Behavioral task
behavioral1
Sample
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
Resource
win7v200410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
Resource
win10v200410
windows10_x64
0 signatures
0 seconds
General
-
Target
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls
-
Size
192KB
-
MD5
bf1efbdca05fab7682b9da5b800c2d4c
-
SHA1
e57949811523eed8ab9321394a537bb909eaa7e7
-
SHA256
5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19
-
SHA512
4ba1b206c2085926972d87d044b770394443b129e707c8f396725597b36a9cb4f7be5de7a9026d579331d6af5a3365d74e3cfe1148420010a2625c7681ed8b07
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
EXCEL.EXEpid process 2024 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
EXCEL.EXEpid process 2024 EXCEL.EXE 2024 EXCEL.EXE 2024 EXCEL.EXE 2024 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
EXCEL.EXEpid process 2024 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\5af3bdbe31bf60ddc4bd101f4bee6e843a58450b4d39c8a12ce58135ec4b1b19.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:2024