Behavioral task
behavioral1
Sample
RFQ No 02082023.xls
Resource
win7-20220812-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ No 02082023.xls
Resource
win10v2004-20220901-en
4 signatures
150 seconds
General
-
Target
RFQ No 02082023.xls
-
Size
1.6MB
-
MD5
745a4b7c4e9cd37a507b5d32ff8cd11a
-
SHA1
f07d044b4dbf365bc57a77d12bc826dc31e748c9
-
SHA256
a44e96c70171ffeff132b26969d39022be8f8af214f6fef9bcee644417315220
-
SHA512
5fbb7dbc70a8f79573333462b6d0ba232db698a37c194ef05c357baf5ff5b273fac83f2a3f956ca8809d5df96475177c932a2c838ab1016bb27aa46ac0e33168
-
SSDEEP
24576:ALKsZyIZy5ZyWZy0ZyVZyMZyTZyodc/fEx5HfMazCawDEUdis:ALKepknF81eddkfKHUaTUd
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
RFQ No 02082023.xls.xls windows office2003