Overview

overview

8

Static

static

5

QDFRFQ 280...60.xls

windows7-x64

8

QDFRFQ 280...60.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QDFRFQ 28022023 - NFB 100960.xls

  • Size

    358KB

  • MD5

    950d284a9f8610c212baa453751d630d

  • SHA1

    49853b732d7c6a9e83cdde5a3adc01a6a906eac1

  • SHA256

    389fc462b50d21b090b29299ed3b9982f203bc94b635335253438ac907ff6fa9

  • SHA512

    911f8ebe61c92fc8918edaf6a76ec13f73d7c42dc9f1c9628d09db7a99b2c39637be6ef39a110168804a63e5789f554d74f9868dd165db675fef9106e7de9d63

  • SSDEEP

    6144:waFJkKXiDU7woFZ+RwPONXoRjDhIcp0fDlavx+W26nAn3SOjhnid/KzTUcCIdNW7:waFiKXKxSrd/7czNWKUJ

Score
5/10
macro

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

    macro

Files

  • QDFRFQ 28022023 - NFB 100960.xls
    .xls windows office2003