1eada510670dffe57447c5a786a440c4472e416d6bb9ece2c018526e6447688c | Triage

Analysis

max time kernel
100s
max time network
18s
platform
windows7_x64
resource
win7
submitted
29-06-2020 18:05

Sharing

Report Analysis Logs

General

Target

Goods_pricelist.xls
Size

83KB
MD5

f7ba28d76229a780717120f7fd0d6e37
SHA1

adbdace8847aa3822dd94284337d9f6a9212189b
SHA256

1eada510670dffe57447c5a786a440c4472e416d6bb9ece2c018526e6447688c
SHA512

6d305936853a30f9fd2044e8b90ba9b771250408ed8c61c1d85c301361669187493c94415eb959eda6815802fcfa1a108de2d377df55ea654fa2041d0ae83ec1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1492 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1492 EXCEL.EXE
1492 EXCEL.EXE
1492 EXCEL.EXE
1492 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1492 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\Goods_pricelist.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...