We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
25 March 2021, 16:03
Analysis environment:
Windows 7 Pro, build 7601, x86
Documents (75).xlsm
MD5:
382BDA41498C41118D59594D4E9AC35B
SHA1:
6BF7D0D5C3327C84039C823282EB35232D54A1FE
SHA256:
9EF0DFA2C7DC75F87BEC0FB632B763306FCA3BAF3515BBB82AA64985DDD97AF6
Analysis result
Threat level:
Malicious activity
Tags:
macros40
Full analysis:
Analysis Documents (75).xlsm (MD5: 382BDA41498C41118D59594D4E9AC35B) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Unusual execution from Microsoft Office
EXCEL.EXE (PID: 2988)
SUSPICIOUS
Uses WMIC.EXE to create a new process
EXCEL.EXE (PID: 2988)
Executed via WMI
regsvr32.exe (PID: 1356)
INFO
Reads Microsoft Office registry keys
EXCEL.EXE (PID: 2988)
Threats
No threats detected