Behavioral task
behavioral1
Sample
Order VVNC03023976.xls
Resource
win7-20230220-en
windows7-x64
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Order VVNC03023976.xls
Resource
win10v2004-20230221-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
Order VVNC03023976.xls
-
Size
999KB
-
MD5
97b9e5a042f1e7a2bfde4d4fe73c49e4
-
SHA1
321cbbce23997d77e71cede025c8e30044d82784
-
SHA256
8a7d1fbcf94d9893fdf8cfc28525dd77c328d4c9e24486b3bed38c12a151f878
-
SHA512
a1d99e324108403f96fc7e4fe66a751dd40fc2820d5fa2cf4962447dee2513081fc989e8d0f3ab83e901ef04dea642665b5e39e63ad9a958a139bfff0cc2ff3c
-
SSDEEP
24576:RFeCiaFeYLFRT5AmkmhYnea18TGB1rPXXzXXXXXXXXXUXXXXXXXXXXXXXXXX1J:D91fflYnr18aBIJ
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
Order VVNC03023976.xls.xls windows office2003