Analysis
-
max time kernel
101s -
max time network
30s -
platform
windows7_x64 -
resource
win7 -
submitted
08-07-2020 09:52
Static task
static1
Behavioral task
behavioral1
Sample
documento_1294.xls
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documento_1294.xls
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
-
Target
documento_1294.xls
-
Size
174KB
-
MD5
70655fedd8f8afc547c74b45bdf19464
-
SHA1
8a45f65d1a9f00ac18cc27ed5ce23dacff84c889
-
SHA256
349424c17dd67932ebdc465442aaf51333bba94f9c8554f77513daff462c2d85
-
SHA512
9e7797e53cf150ab72794af697ed185db41be1307ce4eb2d2e477f9d25e0f4610ddf7f872dcbb499a26d6e0377ba95bd460ab79c63f10cbabcca6cbcb8f813d1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
EXCEL.EXEpid process 824 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
EXCEL.EXEpid process 824 EXCEL.EXE 824 EXCEL.EXE 824 EXCEL.EXE 824 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
EXCEL.EXEpid process 824 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\documento_1294.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:824