Analysis
-
max time kernel
135s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2023 04:30
Static task
static1
Behavioral task
behavioral1
Sample
Sea freight prices for August in Spain.xlsx
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Sea freight prices for August in Spain.xlsx
Resource
win10v2004-20230703-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
Sea freight prices for August in Spain.xlsx
-
Size
13KB
-
MD5
94d1fca0d55924b15acec9bd59e0617e
-
SHA1
07f175fa9598a16cd3d0d73adc69189aa6515207
-
SHA256
d43975ea9a452b26ffd18346265f337893ad30a8257b6eb9a6d65133538f3fa0
-
SHA512
c0deac3ae5a677f09f4255077308423009998006e46eee50beababe1ebd22ec79ccf5951c25d38eba56916696ad8ce0a26943011c48c2885142d32601c96cb61
-
SSDEEP
192:zEfj/zvxF55g6QqsmOpxgTHwAe3VgSTR/vaX3f8zE9V9hOQbPUPMKeAlUz4:ofj/z5FLEpg1qySVvUWgV9hPUPMEKk
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4868 EXCEL.EXE -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4868 EXCEL.EXE 4868 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Sea freight prices for August in Spain.xlsx"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4868