Analysis
- max time kernel
90s - max time network
92s - platform
windows7_x64 - resource
win7v20201028 - submitted
09/11/2020, 20:32
General
- Target Tender For Medical Supplies_642020-0723.xlsx.exe
- Size 112KB
- Sample201109-99ftdkdxge
- SHA256 27faaaca4acb955010d7b8c16764a536c04149f2d332f99668d6ff6f292bfc20
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tender For Medical Supplies_642020-0723.xlsx.exe"C:\Users\Admin\AppData\Local\Temp\Tender For Medical Supplies_642020-0723.xlsx.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx