Behavioral task
behavioral1
Sample
Quotation 11kv CTPT.xls
Resource
win7-20221111-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation 11kv CTPT.xls
Resource
win10v2004-20220812-en
7 signatures
150 seconds
General
-
Target
Quotation 11kv CTPT.xls
-
Size
1.1MB
-
MD5
53a4e7a639e3bf137e774f213999bfd9
-
SHA1
2dea7560d48680d0cdbd5ec281a10d0daaf73e72
-
SHA256
6d60dd648580a7f4c65e6b7e695b1599aa696479fbe04867c78399f0ebf1feda
-
SHA512
5f9adf281c805549d542baf5bbd10bb992417e3f9a4f8e0743c2da93a819c21c556de1f3fdbaf7fcef348e670b60ab1f30b605904938b2ae3c1d672fb2450372
-
SSDEEP
24576:9Wm7+m7bZXXXXXXXXXXXXUXXXXXXXXXXXXXXrX5:
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Quotation 11kv CTPT.xls.xls windows office2003