Behavioral task
behavioral1
Sample
4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015.doc
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015.doc
Resource
win10v2004-20240412-en
General
-
Target
4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015
-
Size
61KB
-
MD5
dc942268f0999efe1a330606789ea05c
-
SHA1
363569aff5cae73574c0aa77a4820850f147a244
-
SHA256
4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015
-
SHA512
3e8bcbf3ce98be1e92dc42882a10724bc16b4de2154be607480e3c496b607f98c288022de80a489f79dc668246c622201a40b9848f25e28691f0447c628f0e60
-
SSDEEP
1536:Vawpsd64sd6Rd64sd64sd64sd64sd64sc4XMlgyYJAXutkbD1FPyH0Dz3:Lsd64sd6Rd64sd64sd64sd64sd64sc4F
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015.doc windows office2003