Behavioral task
behavioral1
Sample
09849599.xls
Resource
win7-20230220-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
09849599.xls
Resource
win10v2004-20230220-en
8 signatures
150 seconds
General
-
Target
09849599.xls
-
Size
1.8MB
-
MD5
d952fa301fd9f01bb61fa82f4d539ec3
-
SHA1
80ee31a197bbd2fb01b6fc7cfe407fdd8faa1c31
-
SHA256
983f594c5ea72f55df264688e77cd814ccf265f270fa062443d0c3198e704ab8
-
SHA512
3b8bd04fca996ae7ea8accf5b0c8415d76af9749f07ac431dd1cb3793d6f2752ecf45d31626a58028f2456119548f2f91338ea9b9de19a57b2254520f784acf2
-
SSDEEP
49152:XLKp+MXB+MX5LKI7r+MXk9TaA2XmEtscCiZfe:7lEcEt4Ek9XoWide
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
09849599.xls.xls windows office2003