SecuriteInfo[.]com[.]Trojan[.]GenericKD[.]45832423[.]22432[.]31470 | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.GenericKD.45832423.22432.31470
Size

100KB
MD5

595549eb6898057e12f3b800988f2c46
SHA1

bac3ffefcad06e5cec547c2a52e3565bd8f50fde
SHA256

7989a5d2e9755d1151264362dd6588dd61c6af6840e30dc3b897f9b6e4a06b40
SHA512

f9e270efcbdd6ec307035fd7788e67d7f5e9a03e75241eedac49116d379228689eec4802eabb110c0b8e737ea7900ff7521db2650cc9e1c2c267eb499104e2dd

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource yara_rule

sample office_macros

Document created with cracked Office version 1 IoCs

Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Processes:

resource	yara_rule
sample	grizli777_cracked_office

Files

SecuriteInfo.com.Trojan.GenericKD.45832423.22432.31470
.pps windows office2003

ÛÁ±¾œ»×ÐEddd