Behavioral task
behavioral1
Sample
9d6a53d8c21545549aa9fde9c41a147605a55cca190c662f4a79c8985c927d35.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9d6a53d8c21545549aa9fde9c41a147605a55cca190c662f4a79c8985c927d35.doc
Resource
win10v2004-20240412-en
General
-
Target
9d6a53d8c21545549aa9fde9c41a147605a55cca190c662f4a79c8985c927d35
-
Size
61KB
-
MD5
92b0a3bab96dd5a1f8ed618fb812c85e
-
SHA1
4e308117d06f0aab9f6b21132d43df8d3cd93b7e
-
SHA256
9d6a53d8c21545549aa9fde9c41a147605a55cca190c662f4a79c8985c927d35
-
SHA512
2850ba303f7dcd6f20d6be989b52f7b941e50df474d83c6b3192dca5e4f3c084b27ad612d797f54f214b5620385698f103c232f46e5938589e4a4afbb3b32c56
-
SSDEEP
1536:Ya1gsd64sd6Rd64sd64sd64sd64sd64sc4XMlgySJAXutkbs1ZPG8iDK3:Asd64sd6Rd64sd64sd64sd64sd64sc4H
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
9d6a53d8c21545549aa9fde9c41a147605a55cca190c662f4a79c8985c927d35.doc windows office2003