Analysis
-
max time kernel
108s -
max time network
79s -
platform
windows7_x64 -
resource
win7v200410 -
submitted
15-04-2020 16:55
Static task
static1
Behavioral task
behavioral1
Sample
7f58013ac38b55147ce4c1af67929739261553b24b5e6f252cce34b25c0794f0.xls
Resource
win7v200410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7f58013ac38b55147ce4c1af67929739261553b24b5e6f252cce34b25c0794f0.xls
Resource
win10v200410
windows10_x64
0 signatures
0 seconds
General
-
Target
7f58013ac38b55147ce4c1af67929739261553b24b5e6f252cce34b25c0794f0.xls
-
Size
187KB
-
MD5
fa3c123b8ce59a7ddc50085ea9babb88
-
SHA1
f353828ca44e8c90f8eddf28bef0175dd07eaef8
-
SHA256
7f58013ac38b55147ce4c1af67929739261553b24b5e6f252cce34b25c0794f0
-
SHA512
0cefd48b46ec825d3c91b178db069bcbf06739ccfadf7c0344e700b0fbdfc4cbd3a7a155b801a758f0c0aaccfce3da29f4aaff57d45176254b1b042a0699271e
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
EXCEL.EXEpid process 1120 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
EXCEL.EXEpid process 1120 EXCEL.EXE 1120 EXCEL.EXE 1120 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\7f58013ac38b55147ce4c1af67929739261553b24b5e6f252cce34b25c0794f0.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1120