Behavioral task
behavioral1
Sample
shipping documents.xls
Resource
win7-20220812-en
windows7-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
shipping documents.xls
Resource
win10v2004-20220901-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
shipping documents.xls
-
Size
666KB
-
MD5
6ee345e07d729dc67be58d9f4d714cd7
-
SHA1
e3048b4cb23be971dc02532a26a66f891ec50744
-
SHA256
53560a2f4539618ffbc4951d192f9db8c9d196792cfd790489ebd1c107abba2f
-
SHA512
dcbf0fcd827083f0183f06f7350cf059b255d472a0fbd91896369c08d04544cc7cb95b82fcc78bd2deaa4e73304082d243c43291edd99864e50889f59fd32488
-
SSDEEP
12288:JzBYuizBZf8cAf7/A/4dU+6ZI7vsfXXXXXXXXXXXXUXXXXXXXXXXXXXXXX6:pBriB+ckA/2U+T7+XXXXXXXXXXXXUXX6
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
Processes:
resource yara_rule sample grizli777_cracked_office
Files
-
shipping documents.xls.xls windows office2003