Behavioral task
behavioral1
Sample
Quotation.xls
Resource
win7-20220812-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
Quotation.xls
-
Size
631KB
-
MD5
10f18533c63fb48cae26eb50a6cdfc27
-
SHA1
7adf8737f57f97eb139fb93e8ee2ec372ff8e5f8
-
SHA256
ea116e42d319aa23208df2ff2438267649245a16e86f08775e09f1b9babeab5c
-
SHA512
6ebb1b0127499146b7b0f6c65e2e0a2d2144d74dfe674ea58e06f8308da44a85234ce80a0a5642c46c212c80468e28d5bb2986dba0da5a3cf381817140edb2bd
-
SSDEEP
12288:AlFeJoH551BkAexi4E2ylAEeETublILOgmEiZd:AlFe+H596g43Tu8omhZd
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Quotation.xls.xls windows office2003