Behavioral task
behavioral1
Sample
zamowienie.xls
Resource
win7-20220901-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
zamowienie.xls
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
zamowienie.xls
-
Size
1.0MB
-
MD5
136064df982e004e5365311430c22392
-
SHA1
99216c4e457a6079fa64c0911cb0631dcbde5bdb
-
SHA256
49750b423096eb5cd522955fb4b20479f5825f8ee8664ede05fcbdebb9ad53ac
-
SHA512
b6730b9776001a15929bfebe2cc52d89942bcfa1cb4707c523b6252cf787db374f7a607a8822fa50dd91382d238988af30be1ac0aa1fa2c6a2fc56ecf0b6ac5f
-
SSDEEP
12288:EFel51BkAfjTFekRtqSdggDsLxdi4u4zTAqEjvjjA7eCU7FeIuQn:EFel9TjTFekRFN2bpEj7jAqq0n
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
zamowienie.xls.xls windows office2003