Analysis
-
max time kernel
113s -
max time network
120s -
platform
windows7_x64 -
resource
win7 -
submitted
14-07-2020 14:07
Static task
static1
Behavioral task
behavioral1
Sample
Potwierdzenie transakcji.xlsx
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Potwierdzenie transakcji.xlsx
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
-
Target
Potwierdzenie transakcji.xlsx
-
Size
846KB
-
MD5
8f88023a1b37208ee309737b449f8047
-
SHA1
5ba895bdb8c42e805e3c7de5602ae27e140b1f82
-
SHA256
365f4b52da1c61f56befdc7dbe2a0eb717a170810e458eb06f02ade266ab6331
-
SHA512
57ac23d38f0433b72608cf555aeb6bede2cd2bc95df97478ae1e726cf1c8e9a36e45a633f2974a2d7dd68c961d31881bfaff1a46de73db02273e238721e0d0bf
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
EXCEL.EXEpid Process 1060 EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
EXCEL.EXEpid Process 1060 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
EXCEL.EXEpid Process 1060 EXCEL.EXE 1060 EXCEL.EXE 1060 EXCEL.EXE 1060 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde "C:\Users\Admin\AppData\Local\Temp\Potwierdzenie transakcji.xlsx"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1060