General

  • Target

    Purchase Order-PO013199.xls

  • Size

    416KB

  • MD5

    492d9f36071a7249c5b82ba93356eda0

  • SHA1

    7c97b06934014541554341c240fc5aed01a82925

  • SHA256

    6c01721c4512a1df4945773cce7cf307df51ef073bda52aa3600983e9227bd9b

  • SHA512

    ec513fd63a9f48910a8e66162f5ff0ca65ba6895df88413ea0299a0a1ff09774b1b0eb1a5eee41398a16565778dde95b98430127a09b40ef73ce1793afc53949

  • SSDEEP

    6144:taFJkKXiDU7wBB4A7y/BeZ+RwPONXoRjDhIcp0fDlavx+W26nAj90w5eSbEjIu4S:taFiKXK+BDewuje51Ij

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • Purchase Order-PO013199.xls
    .xls windows office2003