Analysis
-
max time kernel
138s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15/08/2023, 14:11
Static task
static1
Behavioral task
behavioral1
Sample
August Worksheet 08-14-2023.xls
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
August Worksheet 08-14-2023.xls
Resource
win10v2004-20230703-en
3 signatures
150 seconds
General
-
Target
August Worksheet 08-14-2023.xls
-
Size
37KB
-
MD5
04f994bfd5bc5943d5f914d64b2ea704
-
SHA1
2ce1722cdbbb692521e04ea5eed029cdb092a036
-
SHA256
9dccb14872131bc0cb05bdfd351e9a8b2b63067eebc18a806e09eaa639f94928
-
SHA512
a867f57762c726d51c926caae854ad98bdc54fef830efc131a6ff56d3c013f2a698d0697be46a95c4caa440426b8032fe56fada95ab040dccbf5f5013da35674
-
SSDEEP
768:ZS58wxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAWL/7pyGkD4:s5hxEtjPOtioVjDGUU1qfDlaGGx+cL+m
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3132 EXCEL.EXE -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3132 EXCEL.EXE 3132 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE 3132 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\August Worksheet 08-14-2023.xls"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3132