Behavioral task
behavioral1
Sample
b3a8c4c505ea3dc87be0418e739e67f97ea0f64145d62da58402d6932f169a3d.xls
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3a8c4c505ea3dc87be0418e739e67f97ea0f64145d62da58402d6932f169a3d.xls
Resource
win10v2004-20221111-en
General
-
Target
8969232643.zip
-
Size
314KB
-
MD5
f9a90ef9966f2f2762fdd82323f52892
-
SHA1
b7a46269ea11d295ed431f00e0ee07d883a1c139
-
SHA256
7eb8c48dc18466534d78114c7559b953e297e0660c3d6152b4d910803e3d99e8
-
SHA512
69dad53eabbca725542f46676f8a1deb55d8f004867a78007d9da68e554901d5bfb10d4af1908893d930eb537bc44eeb7b227b3d817520bc92fed366f9db1a6d
-
SSDEEP
6144:yvrEs8J1uLQxt2nYV+5QUZbutepuofIT8Tq5gl6Fez6Lv:iJ8J1Jxt2YVYQWbu5cTqmp6j
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule static1/unpack001/b3a8c4c505ea3dc87be0418e739e67f97ea0f64145d62da58402d6932f169a3d grizli777_cracked_office
Files
-
8969232643.zip.zip
Password: infected
-
b3a8c4c505ea3dc87be0418e739e67f97ea0f64145d62da58402d6932f169a3d.xls windows office2003