Behavioral task
behavioral1
Sample
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
Resource
win10v2004-20220812-en
General
-
Target
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
-
Size
1.0MB
-
MD5
76b15c3a56f8ad8cf55935f9800e25de
-
SHA1
dc2172f1a55fb99c353bf2fa8a73470633dc0ce2
-
SHA256
bfc32e119ab95beecd69c1b8bb96a4fe849d3b0dcd72f22bacf9e02a507902d4
-
SHA512
4f806993ba29cf595ce3a6582ab71ea90bc9faecfe5f39570abf5f6030068cd0335f84db0421790686beac7c596584eb2a90cb3c7832b076acf3cfccd9277b94
-
SSDEEP
24576:tFeOEezjf5XFeNPHlEezjH2rC7ByRu51JcJnH2b2TSfRP2:fKOl1UPKOSruBr5HqFSJ2
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls.xls windows office2003