9c8e1b2166d0ee3df1c3fc9c6e4f16fe6378be10fa7f9ed2eac4e84139d7f152 | Triage

Analysis

max time kernel
114s
max time network
121s
platform
windows7_x64
resource
win7
submitted
30-06-2020 05:48

Sharing

Report Analysis Logs

General

Target

UOD_1004.xls
Size

364KB
MD5

fb7103737708c995ca3610991cd153b4
SHA1

57c71c49cdd5adbd6765b067e7cba4ecaa8263f3
SHA256

9c8e1b2166d0ee3df1c3fc9c6e4f16fe6378be10fa7f9ed2eac4e84139d7f152
SHA512

d3dee4dc857b5d98f062148a1682e29af80400387eb3d27d4d73c4a971d482b9071021c2534f5e8c563bea0f7385be8b63bf5cdec82706795141863d404a9696

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1124 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1124 EXCEL.EXE
1124 EXCEL.EXE
1124 EXCEL.EXE
1124 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1124 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\UOD_1004.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...