Analysis
- max time kernel
108s - max time network
9s - platform
windows7_x64 - resource
win7v200722 - submitted
14/10/2020, 15:53
Static task
static1
Behavioral task
behavioral1
Sample
invoice 7649.xls
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
invoice 7649.xls
Resource
win10
0 signatures
0 seconds
General
- Target invoice 7649.xls
- Size 42KB
- Sample201014-glf2yp29vx
- SHA256 b49203aa8da96cd765d5b118040153202e97d5ebd5054f578d57649e9760bc4a
- MD5 bdb24e8b4d9c7f1b7f49a4994ae96b25
- SHA1 2a11ff240a62469a22bb226b234800b161242cb1
- SHA512 cf5b4570e8f9e4c2a7d00bb641a884425d0cdfce07a59d3bf3ba03abb267b70bff754b3f2cd508c2485d80b46cfccb08693ba642aff1f177991378b6b4f656bd
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1432 EXCEL.EXE - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1432 EXCEL.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1432 EXCEL.EXE 1432 EXCEL.EXE 1432 EXCEL.EXE 1432 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde "C:\Users\Admin\AppData\Local\Temp\invoice 7649.xls"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1432