Analysis date (UTC): 1 January 2024, 19:47Analysis environment: Windows 7 Pro, build 7601, x86

doc.xls

MD5:B54C993E941836BF2C9C69948B30BCF0
SHA1:A3E6234B5310A3918B9E01C08BADF3EB5F44A4B8
SHA256:3861795ECE849D6B417A3C9870A7E0A0ECCD27F74E706B9242D94D5E8885B705

Analysis result

Behavior activities

MALICIOUS

Unusual execution from MS Office

  • EXCEL.EXE (PID: 2044)

SUSPICIOUS

Reads the Internet Settings

  • mshta.exe (PID: 2084)

Runs shell command (SCRIPT)

  • EXCEL.EXE (PID: 2044)

INFO

Checks proxy server information

  • mshta.exe (PID: 2084)

Reads Internet Explorer settings

  • mshta.exe (PID: 2084)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN