Behavioral task
behavioral1
Sample
SHIPPING-DOCUMENT-RF-06-02-23.xls
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SHIPPING-DOCUMENT-RF-06-02-23.xls
Resource
win10v2004-20220812-en
General
-
Target
SHIPPING-DOCUMENT-RF-06-02-23.xls
-
Size
1.6MB
-
MD5
588ac5c5f2d9614817b10d598f495fdd
-
SHA1
a2481fc47f53b392dc58a8ec8a10e04b00953b0a
-
SHA256
e48714654ee875981960049cbdc73041027f9ab94f97a0153b524552503e6d5f
-
SHA512
df3bd8e0046e1e3a35ae75f1da1de8197a96786f678a43ca03c6910c25d41e982ac845311d559d68130178e3217db36b291161b1a976e03643b65429591fb2a4
-
SSDEEP
24576:eLKbueo/vn+9pM+q8GG4MeoZqxWK5vR2GS+YpikArcH1AG8VY4ZDGDoovOfAmrPq:eLKC9OUmF9Zqx55A6ki/raqrWHIbra2
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
SHIPPING-DOCUMENT-RF-06-02-23.xls.xls windows office2003