Behavioral task
behavioral1
Sample
order.xls
Resource
win7-20220812-en
27 signatures
150 seconds
Behavioral task
behavioral2
Sample
order.xls
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
order.xls
-
Size
1.1MB
-
MD5
64ddbe59c47c359bf4913efbdcf51a76
-
SHA1
4bcf1ef7fc968c362e668a4e77c82da9dc1f6047
-
SHA256
0d4e18520bbc8001264d8c40ee65ee9fbd03b385a42feed95e040b74c04644fb
-
SHA512
a645096f533b44093332bc06153888e92f4d1d1fa40dfa416a254d1dbb2fcaef23017438a1203258e89c99cd1ae347ae29b6ebb94661705eb7c60586376035d7
-
SSDEEP
24576:vFejZ+zNY0jnFeyLFRuZL4KjXIzY/9mkXGmbZu:NuZuJjFZa4EeY/SmbZu
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
order.xls.xls windows office2003