1b719ce08de027c58ea2b699753a9189337f1b80f78c342f9f02dee8a8ef6f84 | Triage

Analysis

max time kernel
112s
max time network
116s
platform
windows7_x64
resource
win7
submitted
29-06-2020 18:22

Sharing

Report Analysis Logs

General

Target

Services-pricelist.xls
Size

80KB
MD5

4ff01f434fc4e749b6849f8f91df592e
SHA1

edd85c3426323f9b501b93ccbc9db26b5dc3bc98
SHA256

1b719ce08de027c58ea2b699753a9189337f1b80f78c342f9f02dee8a8ef6f84
SHA512

4684670830b255df62d9f146476f341b46f5b6b8285c568326377e098ab4bfcce4424b13ad0e02c22f5c5c81a1c522fa226f363ed013f94430771026af814258

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

896 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

896 EXCEL.EXE
896 EXCEL.EXE
896 EXCEL.EXE
896 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

896 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\Services-pricelist.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...