Analysis
-
max time kernel
139s -
max time network
146s -
platform
windows7_x64 -
resource
win7 -
submitted
08/07/2020, 14:15
Static task
static1
Behavioral task
behavioral1
Sample
31PN.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
31PN.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
31PN.xls
-
Size
123KB
-
MD5
94a48c8430c69baca1ee704a1306d75d
-
SHA1
f581dc1ce5e90a0ddb7b039362585a35a701572c
-
SHA256
2b2b5c46d214c78f79d5f82b6bcd61ecf6fc2a89c47a976d0522bb8741de826a
-
SHA512
6c56b7c3c8a692a97ae04a83c94143717e32f3b6be7306c4d402742d7a10742715b7b149d8fb28794b32e45a7f92c9f79617b0363a4725da140335fecd448f79
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1496 EXCEL.EXE -
Office loads VBA resources, possible macro or embedded object present
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1496 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1496 EXCEL.EXE 1496 EXCEL.EXE 1496 EXCEL.EXE 1496 EXCEL.EXE 1496 EXCEL.EXE