Analysis
-
max time kernel
117s -
max time network
124s -
platform
windows7_x64 -
resource
win7 -
submitted
16-07-2020 10:34
Static task
static1
Behavioral task
behavioral1
Sample
bff21b4abca94a64119ffa90606ce1d0757410438d140c132bf8941363707ff8.xls
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
bff21b4abca94a64119ffa90606ce1d0757410438d140c132bf8941363707ff8.xls
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
-
Target
bff21b4abca94a64119ffa90606ce1d0757410438d140c132bf8941363707ff8.xls
-
Size
203KB
-
MD5
ec342ada91a0dda503ad94a5ae61a868
-
SHA1
e0847a4ee37e9e7b24975733c7d71c675599e77f
-
SHA256
bff21b4abca94a64119ffa90606ce1d0757410438d140c132bf8941363707ff8
-
SHA512
215e27ad39beeba152b2ca6c79941c4dfcf5d0f62ef1b43324b5e556e70a281a0bd69be89afab1f69e2687871f67e91aade95d04ff8387d2fdb20cb54873c592
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 284 EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 284 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 284 EXCEL.EXE 284 EXCEL.EXE 284 EXCEL.EXE 284 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\bff21b4abca94a64119ffa90606ce1d0757410438d140c132bf8941363707ff8.xls1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:284