Behavioral task
behavioral1
Sample
Purchase Order-PO013199.xls
Resource
win7-20221111-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order-PO013199.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
Purchase Order-PO013199.xls
-
Size
416KB
-
MD5
492d9f36071a7249c5b82ba93356eda0
-
SHA1
7c97b06934014541554341c240fc5aed01a82925
-
SHA256
6c01721c4512a1df4945773cce7cf307df51ef073bda52aa3600983e9227bd9b
-
SHA512
ec513fd63a9f48910a8e66162f5ff0ca65ba6895df88413ea0299a0a1ff09774b1b0eb1a5eee41398a16565778dde95b98430127a09b40ef73ce1793afc53949
-
SSDEEP
6144:taFJkKXiDU7wBB4A7y/BeZ+RwPONXoRjDhIcp0fDlavx+W26nAj90w5eSbEjIu4S:taFiKXK+BDewuje51Ij
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Purchase Order-PO013199.xls.xls windows office2003