Behavioral task
behavioral1
Sample
Quotation RQ-P0953.xls
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation RQ-P0953.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
Quotation RQ-P0953.xls
-
Size
519KB
-
MD5
680f7e27d155aafb7e8424363e5878ce
-
SHA1
b16357cf1c943ad9a062e23fa18e9a7fa7e3057e
-
SHA256
482bdfa5f745d0e52fb5020d3a38ba4d5e0661ac8fda60a632cbccf8d5a2c424
-
SHA512
6881bb72e91007bfbdc88dfbbe44ca63b54142bdc1d4ddd95671bd64bfc2d4c369900286b4c99196a15ad57a23192bef20e6b6754758cf49c010a07f4d2a718a
-
SSDEEP
12288:blaFiKXKY02NM0ry+1bp85p1Wrx5GZPNkV2i:sLKrZy3p85nExcZPK
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Quotation RQ-P0953.xls.xls windows office2003