Overview

overview

8

Static

static

8

Ref_63019.xls

windows7_x64

1

Ref_63019.xls

windows10_x64

1

Analysis

  • max time kernel
    140s
  • max time network
    6s
  • platform
    windows7_x64
  • resource
    win7v200430
  • submitted
    30-05-2020 11:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Ref_63019.xls

  • Size

    217KB

  • MD5

    aff06b0835e56795d31af66a6b42c6e4

  • SHA1

    2a902723995d08232441f35ad847a513f92425f6

  • SHA256

    c287fafd85b5a926e53d1efedba9638dd3f753ec28d2828e25cc7169ff450c9a

  • SHA512

    2cd60f42ea005bd869d7e001da48691b11040ffbd17a8540c5f68d9185de370fce1b8109e1a27f1c170028c865fdc74c18727294732ca1a1b0e481978f4b30ea

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\Ref_63019.xls
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1520-0-0x0000000006320000-0x0000000006358000-memory.dmp
    Filesize

    224KB

    Download
  • memory/1520-1-0x0000000006BC0000-0x0000000006BC4000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-2-0x0000000004820000-0x0000000004828000-memory.dmp
    Filesize

    32KB

    Download
  • memory/1520-3-0x0000000007BC0000-0x0000000007BC4000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-4-0x0000000006A10000-0x0000000006A48000-memory.dmp
    Filesize

    224KB

    Download
  • memory/1520-5-0x0000000007BC0000-0x0000000007BC4000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-6-0x0000000004820000-0x0000000004828000-memory.dmp
    Filesize

    32KB

    Download
  • memory/1520-7-0x0000000007C40000-0x0000000007C44000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-8-0x0000000008C40000-0x0000000008C78000-memory.dmp
    Filesize

    224KB

    Download
  • memory/1520-9-0x0000000007C40000-0x0000000007C44000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-12-0x0000000007C40000-0x0000000007C44000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-13-0x0000000007BC0000-0x0000000007BC4000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-14-0x0000000006A10000-0x0000000006A48000-memory.dmp
    Filesize

    224KB

    Download
  • memory/1520-15-0x0000000006990000-0x0000000006994000-memory.dmp
    Filesize

    16KB

    Download
  • memory/1520-17-0x0000000006BC0000-0x0000000006BC4000-memory.dmp
    Filesize

    16KB

    Download