Analysis
-
max time kernel
116s -
max time network
122s -
platform
windows7_x64 -
resource
win7 -
submitted
14/07/2020, 06:44
Static task
static1
Behavioral task
behavioral1
Sample
f62372d29cc82c0cf3aef7bbb0a0aafbee52987e4d441a52ba2378c540dbbe02.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f62372d29cc82c0cf3aef7bbb0a0aafbee52987e4d441a52ba2378c540dbbe02.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
f62372d29cc82c0cf3aef7bbb0a0aafbee52987e4d441a52ba2378c540dbbe02.xls
-
Size
199KB
-
MD5
dde8eb947b39f4d13bbb0a99542c6a1a
-
SHA1
4c8baadb0226facd3cf521d761808201bca24805
-
SHA256
f62372d29cc82c0cf3aef7bbb0a0aafbee52987e4d441a52ba2378c540dbbe02
-
SHA512
a419b757e4289b26b3761329165db5af4a68181f7e209a003fd5a4b9e7c26dcea5aa272ba26ae239e68b491acafa4f2f2d3c1da9954736bf11b257ed5742eaea
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1500 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1500 EXCEL.EXE 1500 EXCEL.EXE 1500 EXCEL.EXE 1500 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1500 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\f62372d29cc82c0cf3aef7bbb0a0aafbee52987e4d441a52ba2378c540dbbe02.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1500