Analysis
-
max time kernel
101s -
max time network
71s -
platform
windows7_x64 -
resource
win7 -
submitted
14/07/2020, 06:43
Static task
static1
Behavioral task
behavioral1
Sample
33a84d9ab5e59d690dcbd9a1a717717945a4681f9976e54da87c64d7d6f1bb8f.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
33a84d9ab5e59d690dcbd9a1a717717945a4681f9976e54da87c64d7d6f1bb8f.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
33a84d9ab5e59d690dcbd9a1a717717945a4681f9976e54da87c64d7d6f1bb8f.xls
-
Size
194KB
-
MD5
1f5519461b9f7072084de99286f492f5
-
SHA1
980d3920ab413434e15c3a79eb42cc0ad4788cb1
-
SHA256
33a84d9ab5e59d690dcbd9a1a717717945a4681f9976e54da87c64d7d6f1bb8f
-
SHA512
188f3c1d688fa26513793f9da420e27da3d78fd6b60cdba8c74d368f381a5184b528e12533ba1fb599c96c9f593df3f01b268f2a5ae7b27a794ccf0f1e50129f
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1312 EXCEL.EXE 1312 EXCEL.EXE 1312 EXCEL.EXE 1312 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1312 EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1312 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\33a84d9ab5e59d690dcbd9a1a717717945a4681f9976e54da87c64d7d6f1bb8f.xls1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
PID:1312