Analysis
-
max time kernel
52s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2024 21:58
Static task
static1
Behavioral task
behavioral1
Sample
2dbc4748c1b1c5e3b28f83d17859c2426922c29622bff03be2d7b431c832e262.xls
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2dbc4748c1b1c5e3b28f83d17859c2426922c29622bff03be2d7b431c832e262.xls
Resource
win10v2004-20240508-en
General
-
Target
2dbc4748c1b1c5e3b28f83d17859c2426922c29622bff03be2d7b431c832e262.xls
-
Size
31KB
-
MD5
72240866f413e8d992fa614c9f3ac976
-
SHA1
272538bfa9a6e8352002e3cceda16b614a702820
-
SHA256
2dbc4748c1b1c5e3b28f83d17859c2426922c29622bff03be2d7b431c832e262
-
SHA512
af016a66285f99cfd82e99d0d22b8756076b8677711f59e7690f44375da65eda830846780da96196801bd04cbd2c3f312f2e4d4f750fe37b628a54b7e8f703df
-
SSDEEP
768:+TQ//1xEtjPOtioVjDGUU1qfDlaGGx+cWYIxAHDRlNvkFz3bkG/:p1xEtjPOtioVjDGUU1qfDlaGGx+cWYIT
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4812 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE 4812 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\2dbc4748c1b1c5e3b28f83d17859c2426922c29622bff03be2d7b431c832e262.xls"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4812