Analysis
-
max time kernel
101s -
max time network
68s -
platform
windows7_x64 -
resource
win7 -
submitted
16-07-2020 10:34
Static task
static1
Behavioral task
behavioral1
Sample
753352c2a516d22a8192a723b4181f91a83d24b20bfbed4888eb819b8c9ea7c8.xls
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
753352c2a516d22a8192a723b4181f91a83d24b20bfbed4888eb819b8c9ea7c8.xls
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
753352c2a516d22a8192a723b4181f91a83d24b20bfbed4888eb819b8c9ea7c8.xls
-
Size
195KB
-
MD5
b56d7cef5df637821f7ab1e451ad9cd2
-
SHA1
d81c3a2cd65d1c3487f1fcb342002856a90e7567
-
SHA256
753352c2a516d22a8192a723b4181f91a83d24b20bfbed4888eb819b8c9ea7c8
-
SHA512
1978c5d3dbce662de52c70ae90153e149d8f61ded03d740659290ed41b5ee89f767626e050f0f8b85acf393a040e5c0b9f8b07193f026dc6e1781f9fa9dec46b
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 112 EXCEL.EXE 112 EXCEL.EXE 112 EXCEL.EXE 112 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 112 EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 112 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\753352c2a516d22a8192a723b4181f91a83d24b20bfbed4888eb819b8c9ea7c8.xls1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
PID:112