Behavioral task
behavioral1
Sample
06344699.xls
Resource
win7-20230220-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
06344699.xls
Resource
win10v2004-20230220-en
7 signatures
150 seconds
General
-
Target
06344699.xls
-
Size
1.7MB
-
MD5
28e4270491ac410b02934b1ade38cfbc
-
SHA1
2d6217ee1511b253b47bc57ee308c99ef2a8d576
-
SHA256
2fd5ba78367f5840649437435baaec8401c60869f2da20e09ea2d28d99d6a931
-
SHA512
72318f6cffc3ee6ad74c0504fc4673e2c41fd354438b0c4a54d912b2438bafb41d925f87083b3d72a19aab3a6fd82eace46bb8015267d3c4b1f18fc7c92cfd44
-
SSDEEP
49152:1LKCGBLKndM+MXubTJMIXdKNs9XsW0acp:57GFwEub+uH09p
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
06344699.xls.xls windows office2003