Behavioral task
behavioral1
Sample
Scan docs.xls
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Scan docs.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
Scan docs.xls
-
Size
1.0MB
-
MD5
9cb690e41fbc8d9f99099234b01b623e
-
SHA1
ab2a502af3831711753d6b0de777d6e1951ef0dd
-
SHA256
11c28afacf6bea2772cae5463686f49a1b2c03d14879cea1cc83e5c91a96efaa
-
SHA512
db69c02c23a2a32a314d87b4103f59f9990ef51fc4235c5b1612a0b3b2d8a11d8f6565f0e4f5d0ad88dfffa80c73bfeb4667758e955ae7dc22b42768296d5062
-
SSDEEP
24576:KFeeEezjL+6FeDxCuwcCNgV0IVr73gowWBz5:KeOG6Wfwd6V0IVrzhw2z5
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Scan docs.xls.xls windows office2003