Analysis
- max time kernel
139s - max time network
35s - platform
windows7_x64 - resource
win7v200430 - submitted
14/07/2020, 06:44
Static task
static1
Behavioral task
behavioral1
Sample
d948c05cde8779aa8f9bed402d11b87846c225dc49bcbcbeecf296071753ed66.xls
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d948c05cde8779aa8f9bed402d11b87846c225dc49bcbcbeecf296071753ed66.xls
Resource
win10
0 signatures
0 seconds
General
- Target d948c05cde8779aa8f9bed402d11b87846c225dc49bcbcbeecf296071753ed66.xls
- Size 184KB
- Sample200714-ffeh39pqf2
- SHA256 d948c05cde8779aa8f9bed402d11b87846c225dc49bcbcbeecf296071753ed66
- MD5 470b9e66ba8fa770c61be9fb7f64f807
- SHA1 1a99c32af6ff2e61071bc6acba472085a17e270b
- SHA512 550adec166d7aeaebcfcdc2e0ab342b3db8fb90b715d472121fd4f2c940aa3437d2be8ff5857c5d12cdf76c61a066cf0285104f3e7f9aa9e41d27fbeeeec2302
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 828 EXCEL.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 828 EXCEL.EXE 828 EXCEL.EXE 828 EXCEL.EXE 828 EXCEL.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 828 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\d948c05cde8779aa8f9bed402d11b87846c225dc49bcbcbeecf296071753ed66.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:828