1e4e6b2604f324b4f5fcef8a191297f00852bf763fec9f9d7762cf564b528bef | Triage

Analysis

max time kernel
146s
max time network
6s
platform
windows7_x64
resource
win7v200430
submitted
30-06-2020 06:22

Sharing

Report Analysis Logs

General

Target

UOD_0.xls
Size

374KB
MD5

03b5f09b442e54ebe2de2b91d19399c9
SHA1

513023d6a2c721b6320e03238cb3c3ec045d456e
SHA256

1e4e6b2604f324b4f5fcef8a191297f00852bf763fec9f9d7762cf564b528bef
SHA512

e466f1ba54dc4453d6531d349fdca58f17aabec31b93d288cec6ddc51c110f0fe396c81174847f0963207c8e6fe31445d13325fa2a7f8e21ee29d902b600a9ae

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1008 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1008 EXCEL.EXE
1008 EXCEL.EXE
1008 EXCEL.EXE
1008 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1008 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\UOD_0.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...