Behavioral task
behavioral1
Sample
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
Resource
win10v2004-20220812-en
General
-
Target
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls
-
Size
631KB
-
MD5
1575bc0da8742514470e1b8974202163
-
SHA1
2a2deb07222928d0aec7296f97b11b72d39daccd
-
SHA256
fbb94aed1870da221ab0edef3f95284b56e3548b583d2fa55f9729245005f7a6
-
SHA512
c91fdf3c1c4a33abf06f3c506d297ccb0ef2a2cc45198853be6dc7459d6f790c52aa07bd7183b50d85e3f060a64712ce3262ede5467dd6c46e3588eda1c5ca5b
-
SSDEEP
12288:p1FeP7t+LFRLs36MG4d9FBEf3iB+Qdd9:p1FePQLFR436udzDp
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Enquiry 220062 Krause K + K GmbH Armaturenfabrik.xls.xls windows office2003