Behavioral task
behavioral1
Sample
PO.xls
Resource
win7-20221111-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
PO.xls
-
Size
630KB
-
MD5
96a2b720a8f958e912ed86f812686fe1
-
SHA1
4d4be4c7a8da0f7d8162115d6604ce7711119e47
-
SHA256
d401b52ce129c7d8a9d548988b482d21597e4a93cf388b72a324e398907b9c6c
-
SHA512
ac96cc2920f150f72db2d2a1518a3aa2385ac8a0ddfa3852615bf923717d8ab960d04c3966e649f1ed800ae7707396737b17bac80f405bdf26592a055b3647e2
-
SSDEEP
12288:KaFiKXKEzBYMzBZ05/K6u/OotnHLS0gke7+ik:XLKoBRBm5/KTtnHorR
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
PO.xls.xls windows office2003