Behavioral task
behavioral1
Sample
TEC073M359_Evaluation Form.doc
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
TEC073M359_Evaluation Form.doc
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
TEC073M359_Evaluation Form.doc
-
Size
63KB
-
MD5
f565bede5338c49d6dad8e1c15b688b9
-
SHA1
317d0ab5e60c83c5d7562083c1a15c5c1c4542ca
-
SHA256
2825e6f6eb37b729fc57d82b9db7d0b657166693f7115e200558cb06cdf737f4
-
SHA512
47b3f8a0aee28e2be4613303d225be19057b6c99bcab4e04b1eee84b6df78840405abaf44c4e84951e67d4f1c1f150c35fa33131baa6403d7c8782baf48242c3
-
SSDEEP
1536:b+Tr3FNsd64sd6Rd64sd64sd64sd64sd64sc4XMllquJAXutkbTL0k3OqDV3mk8c:OrHsd64sd6Rd64sd64sd64sd64sd64sh
Score
5/10
Malware Config
Signatures
-
Document created with cracked Office version 1 IoCs
Office document contains Grizli777 string known to be caused by using a cracked version of the software.
resource yara_rule sample grizli777_cracked_office
Files
-
TEC073M359_Evaluation Form.doc.doc windows office2003