Behavioral task
behavioral1
Sample
412.xls
Resource
win7-20221111-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
412.xls
Resource
win10v2004-20220901-en
4 signatures
150 seconds
General
-
Target
412.xls
-
Size
1.1MB
-
MD5
ca4a46a15c54414b283f255a118a137d
-
SHA1
bf23cecc4d1814cc4a25f5c4b5e38950ce2ecdf4
-
SHA256
34af217203aac4784ab8f267620e94e9cf9084a1475317832e63d2fdf58671f0
-
SHA512
5d9e6f80e0a416a159f10116b082a39e11fc88ca5b1d217de797bbb7360777735a13399106938e8e5a7aab9a2c1edd6b9d3a82977261739d2d57341bf7241d62
-
SSDEEP
24576:gLKUMeouOEXJAJ6paXiiGYvBB5DbbgJcmOFFOaBFgejwGY:gLKJ9uOEXJABrpgJZONrNjw
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
412.xls.xls windows office2003