General

  • Target

    d567d6b6121065f2f4651f98e32dcd4228128c208cd66329b1906e0ae35b1c45

  • Size

    28KB

  • MD5

    c26e811b04f27f1e71719a365256cf59

  • SHA1

    94822660570f5e27d92c81a6660b5bac4f52033e

  • SHA256

    d567d6b6121065f2f4651f98e32dcd4228128c208cd66329b1906e0ae35b1c45

  • SHA512

    66fcbf9cd0f788a17af53895f4a6d1229158bca1882e3705ea89205b3e1da70c5156e23072dd0b81260c811dac8566f953b5462dacc3458ebd03c225e87ba442

  • SSDEEP

    768:N2v38TehYTdeHVhjqabWHLtyeGxZNbUTISSxRZKOzXE9:NS38TehYTdeHVhjqabWHLtyeGxZZUTIi

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • d567d6b6121065f2f4651f98e32dcd4228128c208cd66329b1906e0ae35b1c45
    .xls windows office2003

    Ice