Analysis
- max time kernel
115s - max time network
120s - platform
windows7_x64 - resource
win7 - submitted
14/07/2020, 07:07
Static task
static1
Behavioral task
behavioral1
Sample
documento_444.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documento_444.xls
Resource
win10v200430
0 signatures
0 seconds
General
- Target documento_444.xls
- Size 180KB
- Sample200714-rfa57vtw2e
- SHA256 67bd66ce3e64e2f33f3a4d2f202cfcc0e47f0b4c7f9a85fb7b4c47a979b6fe03
- MD5 01fec3e0f54c834f90d33f23ced26e6b
- SHA1 3584e950f70ab860ee936d86ce1d75791b3eb3d9
- SHA512 43da6f0bbad71657c4f3c9b2af10b0592e8f3bce2cd11f7ca38d02b28db5bb7d50dde6d9d1e7562fdc3d8ebb6b1b785edc70a2fca68cac601a8ecb409e5fc635
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 608 EXCEL.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 608 EXCEL.EXE 608 EXCEL.EXE 608 EXCEL.EXE 608 EXCEL.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 608 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\documento_444.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:608