Analysis
-
max time kernel
106s -
max time network
29s -
platform
windows7_x64 -
resource
win7 -
submitted
07-07-2020 18:01
Static task
static1
Behavioral task
behavioral1
Sample
4989a6b8805fbd75b9d414c956751e4bea044ca394e36fda46b7dd472d55f28f.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4989a6b8805fbd75b9d414c956751e4bea044ca394e36fda46b7dd472d55f28f.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
4989a6b8805fbd75b9d414c956751e4bea044ca394e36fda46b7dd472d55f28f.xls
-
Size
189KB
-
MD5
4fda007a1779631ae14da954cb0b95d4
-
SHA1
f335a6c4998871b9f7ca20e5e7f41878db0f2b3f
-
SHA256
4989a6b8805fbd75b9d414c956751e4bea044ca394e36fda46b7dd472d55f28f
-
SHA512
7d907f5ddc72823e5dea5fbd393ec6002fc1b2bc858cc5017c0984de4c6a504407ce942ed854deff02cec41871cfefb4475337c65b8a4993a9c52364a5d77f46
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1100 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1100 EXCEL.EXE 1100 EXCEL.EXE 1100 EXCEL.EXE 1100 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\4989a6b8805fbd75b9d414c956751e4bea044ca394e36fda46b7dd472d55f28f.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1100