Behavioral task
behavioral1
Sample
CI + PL.xls
Resource
win7-20221111-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
CI + PL.xls
Resource
win10v2004-20221111-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
CI + PL.xls
-
Size
520KB
-
MD5
6534221bc87656ae05f38e1c2d548314
-
SHA1
caee0f6af45f1c0fbdba867a6651a1a5f628847b
-
SHA256
5f548b67c2aa3b94c8a4bfa92b9753976ec1cf704cafab0823ddfef6ee4e6392
-
SHA512
13ffdee75823900f6f854e7b9879f9014c970c04f894fb394bb567af658a22a673b3e6b0c7f8ad4fd8c5fd0f8b19d58eb0dfe4d0bc231321ed0573d567601440
-
SSDEEP
12288:hdaFiKXKp02NM0ry+1/85p1Wrx7kaosOK0:+LK+Zyb85nExAqOV
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
CI + PL.xls.xls windows office2003