5da1ebb13fe8114a10ce5c08918c35010b32b1aefab96c0ffede51bef3e8def2 | Triage

Analysis

max time kernel
100s
max time network
31s
platform
windows7_x64
resource
win7
submitted
08-07-2020 13:56

Sharing

Report Analysis Logs

General

Target

documento_742.xls
Size

103KB
MD5

664518507fa491cb8970472be678c3fa
SHA1

db3570bd1e7da94cfcfa7ae45e3e057a0c28a612
SHA256

5da1ebb13fe8114a10ce5c08918c35010b32b1aefab96c0ffede51bef3e8def2
SHA512

3e31dd4c72e1505ba2c738579389580ad2dd680929de1f2f588282077a7894b756fc8b38c7fb412ca0e7033566f694d10aed6873bf16eac7a9800d41e495e845

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1144 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1144 EXCEL.EXE
1144 EXCEL.EXE
1144 EXCEL.EXE
1144 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1144 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\documento_742.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...