Analysis

  • max time kernel
    75s
  • max time network
    137s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    08-07-2020 09:24

General

  • Target

    142107131.xlsx

  • Size

    14KB

  • MD5

    1fcc2438808c5e35cd489e208b36f979

  • SHA1

    490f4b0a6ba422bb60459d8bd0f58d71f79028a7

  • SHA256

    0b9f47972855a57b0402cb51ee15e3bb198699f169858bce956e84bc7303adb5

  • SHA512

    100a8f3ac6cd804e5a24b665ca19bf9f5e4231ce06f77098d6687a9faf12b2819a6f997621f2970f0beb1397bdb8595999481589fc25cad73fef3a890e3f5305

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\142107131.xlsx"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: AddClipboardFormatListener
    • Checks processor information in registry
    • Enumerates system info in registry
    PID:3060

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads