Behavioral task
behavioral1
Sample
5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc
Resource
win10v2004-20240508-en
General
-
Target
5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc
-
Size
126KB
-
MD5
5deffc4c711bfd5ae63a48ae7988c71e
-
SHA1
8197a5becd55a224275e1f87aacaf0780133d51d
-
SHA256
5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f
-
SHA512
259f7cd9cb03408fabd9740177e65a5325f3b90d60d15929943aaae1dcb2fd1f92b693197ff696fd698ed809f48db4678ce89e9f9a76d4c5ae4e0aa4feadb7cb
-
SSDEEP
1536:B7O4fR99ZZ3YWnQao+Ik7VabT8GDAlHP0+DQtSxrt/Uvfa6uOKEHhOKKWqwKOa6K:FOYR9DfEqt9H
Malware Config
Signatures
-
resource yara_rule sample office_xlm_macros -
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc.doc windows office2003