7a7269271ab8c721df1f43ac853d4b71cef7e5015696d2bb46f89fcb3ce92160 | Triage

Analysis

max time kernel
146s
max time network
6s
platform
windows7_x64
resource
win7v200722
submitted
31-07-2020 10:05

Sharing

Report Analysis Logs

General

Target

Form_0015135479.xls
Size

245KB
MD5

2d28a4e03ec3c94fbaa1e3c1c333bd51
SHA1

c812e11daad5bc081159f5f80979686d08ce59c0
SHA256

7a7269271ab8c721df1f43ac853d4b71cef7e5015696d2bb46f89fcb3ce92160
SHA512

daa0b765b581eba4891459138dcfc528c5a160b01fd1915b1a2df08d85d18fb9c76d1c7fc3eeed4f578fd00768c8f61d675466109bf1576dfef1350f83216bca

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1504 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1504 EXCEL.EXE
1504 EXCEL.EXE
1504 EXCEL.EXE
1504 EXCEL.EXE
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

EXCEL.EXE

pid process

1504 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\Form_0015135479.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1504

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...