Behavioral task
behavioral1
Sample
4a2a95aec98b6e13ad21eafd2b57515e7ae811a8e1abc4a77f6580c955087fa1.doc
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4a2a95aec98b6e13ad21eafd2b57515e7ae811a8e1abc4a77f6580c955087fa1.doc
Resource
win10v2004-20240412-en
General
-
Target
4a2a95aec98b6e13ad21eafd2b57515e7ae811a8e1abc4a77f6580c955087fa1
-
Size
60KB
-
MD5
999e9dce89e9beef24e272760fc4c542
-
SHA1
89f0896507320ce6d366c7fcfaf33f8fdbc01d56
-
SHA256
4a2a95aec98b6e13ad21eafd2b57515e7ae811a8e1abc4a77f6580c955087fa1
-
SHA512
0cf790cfa7d93f29acfa7e0f2069ef6b16a73796bdbbd0ed6a254985f224330c382f61d75a584c70f752e476a26e252c35e0869e49db1afe3ee34c85d9ee0eaa
-
SSDEEP
1536:ZUUUUha/Ssd64sd6Rd64sd64sd64sd64sd64sc4XMl0q0JAXutkbEkCPG7Dm3:ZUUUU5sd64sd6Rd64sd64sd64sd64sdt
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
4a2a95aec98b6e13ad21eafd2b57515e7ae811a8e1abc4a77f6580c955087fa1.doc windows office2003