Behavioral task
behavioral1
Sample
Quotation.xls
Resource
win7-20220812-en
windows7-x64
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation.xls
Resource
win10v2004-20221111-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
Quotation.xls
-
Size
1.2MB
-
MD5
e8297d2ac781efdfe4b936ef1f9484e3
-
SHA1
ee482658d930442cbfe487938d2ed17e5cbcd8ad
-
SHA256
c75ecd8da080a142cacb8c8f6ed8d3fcb1b6b3f1a88490a122293a51b4b4dcb9
-
SHA512
0c1daa27053003c807cdc2eeb2815d4da23bd68141694d78ed7fd5d34ddb585c2d46fc1d851906c0f94833f1df2d8485d1c01a8d4f2b3c35c41ec10ec6055d5b
-
SSDEEP
24576:+LKMZyOZy8LKNZyeZyhQ8ToW0cwmnAoNa:+LK+5zLK3hkjTVwmPN
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Quotation.xls.xls windows office2003