Analysis
-
max time kernel
158s -
max time network
168s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
17-01-2022 23:08
Behavioral task
behavioral1
Sample
b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm
-
Size
110KB
-
MD5
88ba108c5c564f6dab3e1c4031a9a7e9
-
SHA1
fbffd091afdae3d1e40a17e4f1c73174afc6234e
-
SHA256
b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83
-
SHA512
82fec2d0679d56c1911d606463a5f5894c5de0ded95a11315f38fea796298884b24a37b10f9c5d1df3fdfc044b06c71f75e74d7b53fab57c133798a0124736ff
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3044 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3044 EXCEL.EXE 3044 EXCEL.EXE 3044 EXCEL.EXE 3044 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3044