Behavioral task
behavioral1
Sample
CJOG0190_Evaluation Form.doc
Resource
win7-20230831-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
CJOG0190_Evaluation Form.doc
Resource
win10v2004-20230915-en
4 signatures
150 seconds
General
-
Target
CJOG0190_Evaluation Form.doc
-
Size
61KB
-
MD5
ae184aed345fa0e88d88f4583a2b97fc
-
SHA1
be5c85b21f5b1bbf288435dd32ce24677a89b343
-
SHA256
8b43929dbee49fadca659e176689325f1fff2480fb01bfdbbd79593c1eddacd8
-
SHA512
977a93a9839dec6d99baac8f57272a4c1a5e18a33fac0e1160d760a430931f12c46015d040dd048d20bd8338c81aecd74c496e1de0c798f2f0023b022c5cdaa6
-
SSDEEP
1536:HftZEuTIsd64sd6Rd64sd64sd64sd64sd64sc4XMlNqZJAXutkb0kI0lDy3:lnIsd64sd6Rd64sd64sd64sd64sd64s2
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
CJOG0190_Evaluation Form.doc.doc windows office2003