Behavioral task
behavioral1
Sample
KW FAHAD Order.xls
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
KW FAHAD Order.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
KW FAHAD Order.xls
-
Size
1.0MB
-
MD5
83fb9b4b8bf57924205be8c237f8e591
-
SHA1
2630fce743e760f869e704406aa5fd3587c27660
-
SHA256
5319bcca360ed083ad894ecd99d85dbc0a889e68a418695e9968d2d0951d9cce
-
SHA512
cf39bc9633a6725efd89bc68ed3d1f277b351d043f9e4791a4fa7199a17a8f5e1aa8a429f768bf4f26b25405259295b72d7fb92a6fdafd9df64767fc5182907d
-
SSDEEP
24576:3Fe4xZEezjzEgFeHLLFRmLgrppC6w+B/+phu65y:V32OsU2ScppC6LB/U5y
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
KW FAHAD Order.xls.xls windows office2003