Analysis
- max time kernel
111s - max time network
15s - platform
windows7_x64 - resource
win7v200722 - submitted
14/10/2020, 16:45
Static task
static1
Behavioral task
behavioral1
Sample
RI-7742.xls
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
RI-7742.xls
Resource
win10
0 signatures
0 seconds
General
- Target RI-7742.xls
- Size 42KB
- Sample201014-9tzmjd4b36
- SHA256 fb7a6035b4d3bb4f80948799ccdc971f64243da8d3be21af368f474121837b4e
- MD5 8a60030cd8aba0e7fc74396bc7b686ea
- SHA1 75586f090ad77b17c908632a9f2032e50d9256d9
- SHA512 0bcf2423bf4ed71887180505d766246c7bbc7e86dfc2508f32fd1916aeef761c45beefb696344eb57cd28e05487627a4e3aa95a86e63619d2ec8761c1431c067
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1516 EXCEL.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1516 EXCEL.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1516 EXCEL.EXE 1516 EXCEL.EXE 1516 EXCEL.EXE 1516 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\RI-7742.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1516