Behavioral task
behavioral1
Sample
C5416FC339F429857AD3945656E58503BFE8F5094AC840FBB8884EC74FE35839.xls
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
C5416FC339F429857AD3945656E58503BFE8F5094AC840FBB8884EC74FE35839.xls
Resource
win10v2004-20230220-en
General
-
Target
C5416FC339F429857AD3945656E58503BFE8F5094AC840FBB8884EC74FE35839
-
Size
1.0MB
-
MD5
a8bcc9eaafc2aed33bfb0567aade60af
-
SHA1
6b98ce8b56da3057fa2ae418e4a1f8eb56e40460
-
SHA256
c5416fc339f429857ad3945656e58503bfe8f5094ac840fbb8884ec74fe35839
-
SHA512
94b7a6ae64af65235df599e793c0e2ce1cb42d49920a041c4a869e116b9a4532a56ec74824181c90f0881004b1dc229ed42fdacf05992c746e8297b766917974
-
SSDEEP
24576:sFemxREezjEXm767FeP6EezjVlY9m74XjhAvC+TBaRugjpXXXXXXXXXXXXUXXXXU:QVuOf6Z6OJi5XCvZQ
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
Processes:
resource yara_rule sample grizli777_cracked_office
Files
-
C5416FC339F429857AD3945656E58503BFE8F5094AC840FBB8884EC74FE35839.xls windows office2003