9669eef629e4ab04993fe21785b7d9f17b4a754666298f9179e6bdfb262ae460 | Triage

Analysis

max time kernel
86s
max time network
41s
platform
windows7_x64
resource
win7
submitted
07-07-2020 12:39

Sharing

Report Analysis Logs

General

Target

PI.xls
Size

78KB
MD5

db3cbb6f1e32f89dd92e9cfc7ecebb28
SHA1

b28f2a7722f39ff823129b066f758c9b18c44b0a
SHA256

9669eef629e4ab04993fe21785b7d9f17b4a754666298f9179e6bdfb262ae460
SHA512

506cc3f529d4609d7b4b225afc8cec60c1e682bedb19043cbfb5676423597f84e7e7c33aef74a0e02742713d98098f7884a5deec412c2ef67235294733fba284

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

EXCEL.EXE

pid process

1108 EXCEL.EXE
1108 EXCEL.EXE
1108 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1108 EXCEL.EXE
Office loads VBA resources, possible macro or embedded object present
Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1108 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\PI.xls
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
PID:1108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...