Analysis
-
max time kernel
150s -
max time network
6s -
platform
windows7_x64 -
resource
win7v200430 -
submitted
16/07/2020, 10:33
Static task
static1
Behavioral task
behavioral1
Sample
18a225d2163d3a22c902f3473909971f48d069713f8d0e3ad326c2564c65d343.xls
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
18a225d2163d3a22c902f3473909971f48d069713f8d0e3ad326c2564c65d343.xls
Resource
win10
0 signatures
0 seconds
General
-
Target
18a225d2163d3a22c902f3473909971f48d069713f8d0e3ad326c2564c65d343.xls
-
Size
189KB
-
MD5
419f7df7c66a3b793343a292e8e71d1c
-
SHA1
7574a7180f3278b68a9e041e89b2d40cdfdb9459
-
SHA256
18a225d2163d3a22c902f3473909971f48d069713f8d0e3ad326c2564c65d343
-
SHA512
ccc33f929d910b39ff12ffaa6853b4c4b9785badb02eb7cd0c02460c97349920f42ebf91b765741a37bf17e33b518dcc5ad6b9c4aa339f268d78b831a8dff23d
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 888 EXCEL.EXE 888 EXCEL.EXE 888 EXCEL.EXE 888 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 888 EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 888 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\18a225d2163d3a22c902f3473909971f48d069713f8d0e3ad326c2564c65d343.xls1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: AddClipboardFormatListener
PID:888