Behavioral task
behavioral1
Sample
ACGH0071_Evaluation Form.doc
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ACGH0071_Evaluation Form.doc
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
ACGH0071_Evaluation Form.doc
-
Size
60KB
-
MD5
fe525b90fdf0cfb0bb9e613ffe68bc48
-
SHA1
7501ff32061551e7ddb34eaa1b03fe48223c674f
-
SHA256
e843602e12d7cb36f2d2d66f3d279799d0d5af927a724dca086421c78ea138f5
-
SHA512
e5df47c8663265a6f0c24cef31874f9eac25a3fadb704ba2ef82014ab1059001be5083c3fba5e027856511f430f8ad28baf9f93fa7a16ec73192e70e6e190092
-
SSDEEP
1536:omhyRsd64sd6Rd64sd64sd64sd64sd64sc4XMleq7dJAXutkbpkrSLDy3:+sd64sd6Rd64sd64sd64sd64sd64sc4p
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
ACGH0071_Evaluation Form.doc.doc windows office2003