Behavioral task
behavioral1
Sample
Quotation.xls
Resource
win7-20230220-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation.xls
Resource
win10v2004-20230220-en
7 signatures
150 seconds
General
-
Target
Quotation.xls
-
Size
1.1MB
-
MD5
919c0f851b252a6c834b5ba9470e6c0d
-
SHA1
df40f89bbc105c96aa93ce2465a3ed06cb7e065a
-
SHA256
8be101509461d8954f93b6898c1fe407f6a95c78de3b64392e5b785ce55df5b0
-
SHA512
ca41ce37d8d30a6549847df759dc810ea11d9b598a776bac28660c811fc479f7a6563004a851c1d786755ed0d94995e2086dd0d924f71d853c0d7c623f2cef9f
-
SSDEEP
24576:iFetUMdicm7bVFee59y5hm10LPHjAqbnpQ2IHYQRrGrdXXXXXXXXXXXXoXXXXXXf:ifRbHdybLbfnevHYQRz
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
Processes:
resource yara_rule sample grizli777_cracked_office
Files
-
Quotation.xls.xls windows office2003