67ffda191198a019f940d2d2876197731d42c10988e2fafe54af19863c725eb7 | Triage

Analysis

max time kernel
142s
max time network
148s
platform
windows7_x64
resource
win7
submitted
08-07-2020 05:28

Sharing

Report Analysis Logs

General

Target

documento_1796.xls
Size

185KB
MD5

e9e856e44de0bb9ad89ebcb675278c0f
SHA1

47160efb1c1970f447da8e296fabaa025e8b48b2
SHA256

67ffda191198a019f940d2d2876197731d42c10988e2fafe54af19863c725eb7
SHA512

14884ccac89c881da709f57ec17d18d6fb827ab3376917582fa3f7d637d5fdde91c111db9f8bb9a3c74400beacc9f6191d644e1f75caaf361d7cfecd750b86d1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1152 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1152 EXCEL.EXE
1152 EXCEL.EXE
1152 EXCEL.EXE
1152 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1152 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\documento_1796.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...