Behavioral task
behavioral1
Sample
IJPRA0137_Evaluation Form.doc
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
IJPRA0137_Evaluation Form.doc
Resource
win10v2004-20240426-en
4 signatures
150 seconds
General
-
Target
IJPRA0137_Evaluation Form.doc
-
Size
59KB
-
MD5
c1af8c87cdc4f110454b78498f949f0e
-
SHA1
6aa450eddaf615b1655bf9f31fdeecfa860fc44a
-
SHA256
163595f2c9fd6c3a92b5d7b7daf9fd63ac2210802f933376fef24425a1d4de6b
-
SHA512
2d35a8c3f17c9e18af613866f2cc447970dffdb671847ae3e3d5fc106a60ca23552d055ad6ba056803a21cd187d11b9b0aca83df4f30dba6eff590b52a6a2005
-
SSDEEP
1536:5L5t27sd64sd6Rd64sd64sd64sd64sd64sc4XMllqM8JAXutkbMVkSI7YD43:V327sd64sd6Rd64sd64sd64sd64sd64/
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
IJPRA0137_Evaluation Form.doc.doc windows office2003