Behavioral task
behavioral1
Sample
COF2023027634.xls
Resource
win7-20220812-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
COF2023027634.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
COF2023027634.xls
-
Size
1.0MB
-
MD5
a4dcb8dc89a5e3c6a772887d58969cf3
-
SHA1
f877b98285c2f903fe7dbbe074d81d213bb1355f
-
SHA256
99575c40eb6df85130e56b622b7c1fa58f20d821e404363af7cbf14c501cf8de
-
SHA512
fc838eb0017e521ebae472dd9a45352432231effae672824fdd93d106e8cbe35d5f649d20ec9f7b5d556eb3bef4022645cec9b2f9b339830c37b05fa8bfca6b4
-
SSDEEP
24576:1Feruw6ZpvFenMbvTnCWnYGFEG3dRseW:nnw8pNlbvT1FEOdRsB
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
COF2023027634.xls.xls windows office2003