Analysis
-
max time kernel
134s -
max time network
33s -
platform
windows7_x64 -
resource
win7v200430 -
submitted
14/07/2020, 06:43
Static task
static1
Behavioral task
behavioral1
Sample
911cb9fd746ece672b220ed0d916a6f25396ed4f6ac6d703a81a0f0d4841caea.xls
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
911cb9fd746ece672b220ed0d916a6f25396ed4f6ac6d703a81a0f0d4841caea.xls
Resource
win10
0 signatures
0 seconds
General
-
Target
911cb9fd746ece672b220ed0d916a6f25396ed4f6ac6d703a81a0f0d4841caea.xls
-
Size
178KB
-
MD5
9ef2317df117717c6a2c38bf8f756685
-
SHA1
a5b42785846fe03005fc0ce65ea8e445aeb4fa4e
-
SHA256
911cb9fd746ece672b220ed0d916a6f25396ed4f6ac6d703a81a0f0d4841caea
-
SHA512
f564361bff740a7ca1d7920698f2e7381fa9f06da8170cf4452e96be47219d0bbbc1df660a437e254887eaadb5128831a11c631c70ead3e282e95be6377589df
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1400 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1400 EXCEL.EXE 1400 EXCEL.EXE 1400 EXCEL.EXE 1400 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1400 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\911cb9fd746ece672b220ed0d916a6f25396ed4f6ac6d703a81a0f0d4841caea.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1400