Behavioral task
behavioral1
Sample
DOC_NEW ORDER 548886.xls
Resource
win7-20230220-en
windows7-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC_NEW ORDER 548886.xls
Resource
win10v2004-20230220-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
DOC_NEW ORDER 548886.xls
-
Size
1.1MB
-
MD5
644ea477b14e89d7f6075c7619d6cef7
-
SHA1
aafa3f8b5be0c7e569ba4e3ea85d2a2b9a14309d
-
SHA256
de2cc36754155ee17783f7f6df524a49e845208f3d58a8840210dc8101b60db8
-
SHA512
43b3d8992314a35b14306b94cb2d43664ee73bc6bb2ff9608986eecf11d93eb6c0bfe7ca6d5ca968af0008145ce7924ac10713763774eed0d452891ee23a8ffe
-
SSDEEP
24576:8Fe5Z59H8m7wRFe8EezjH5GmzbveNK7aqdid+GiAE8Nv7dXXXXXXXXXXXXAXXXXu:g0ZDwDwO1hvSK7aubGiAE8UA
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
DOC_NEW ORDER 548886.xls.xls windows office2003