Behavioral task
behavioral1
Sample
SHIPPING DOCUMENT.xls
Resource
win7-20220812-en
8 signatures
600 seconds
Behavioral task
behavioral2
Sample
SHIPPING DOCUMENT.xls
Resource
win10v2004-20220812-en
5 signatures
600 seconds
General
-
Target
SHIPPING DOCUMENT.xls
-
Size
391KB
-
MD5
c09c734c8db4324f23b0efce476dfc1e
-
SHA1
6eb102889a77841a934752cb27cd76ca91029de1
-
SHA256
f82e74f1a8257fd180ad94501585b6f634a893784844b0bd7e054930da3cbfb2
-
SHA512
c75daf0b5c03ecb28a928d10926ea4dc7a956ddf0d7bc4ccb146ccef53e4735220975a8da3f31abf8f2ed56a209f86722df2b9ab6651f1745fb7f2134a5dc1e7
-
SSDEEP
6144:DaFJkKXiDU7wVdMZ+RwPONXoRjDhIcp0fDlavx+W26nAQ90A5eRGsMvymrdS9pcO:DaFiKXKfieAVNds
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
SHIPPING DOCUMENT.xls.xls windows office2003