Analysis
-
max time kernel
144s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
26/08/2023, 13:57
Static task
static1
Behavioral task
behavioral1
Sample
a2b95c7da1297ac388109267c50c747ad7a73eaa8cc66ae680e1a01ed87b5b5d_JC.xlsx
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a2b95c7da1297ac388109267c50c747ad7a73eaa8cc66ae680e1a01ed87b5b5d_JC.xlsx
Resource
win10v2004-20230703-en
General
-
Target
a2b95c7da1297ac388109267c50c747ad7a73eaa8cc66ae680e1a01ed87b5b5d_JC.xlsx
-
Size
6KB
-
MD5
60fefbbe3e3699d55a5ffe567dc1bac9
-
SHA1
aa40cf38bfd4e4a93f35c1258a42ab2e9c9885e0
-
SHA256
a2b95c7da1297ac388109267c50c747ad7a73eaa8cc66ae680e1a01ed87b5b5d
-
SHA512
857b4d828eeaeb5821d95d0219c1c2e2655cc36030c2fb64ea8b493cf2f96108a3937e06c302b72769cb8da84ed961ddbc430f1e195db56dec036497f44078f9
-
SSDEEP
192:qinYgGeAiExUXDH/5XoYKCYS4NdZYjdQS++N:xmAXDHRYFLS+ZYjnTN
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1892 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1892 EXCEL.EXE 1892 EXCEL.EXE 1892 EXCEL.EXE 1892 EXCEL.EXE
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\a2b95c7da1297ac388109267c50c747ad7a73eaa8cc66ae680e1a01ed87b5b5d_JC.xlsx1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1892