General

  • Target

    PO.xls

  • Size

    630KB

  • MD5

    96a2b720a8f958e912ed86f812686fe1

  • SHA1

    4d4be4c7a8da0f7d8162115d6604ce7711119e47

  • SHA256

    d401b52ce129c7d8a9d548988b482d21597e4a93cf388b72a324e398907b9c6c

  • SHA512

    ac96cc2920f150f72db2d2a1518a3aa2385ac8a0ddfa3852615bf923717d8ab960d04c3966e649f1ed800ae7707396737b17bac80f405bdf26592a055b3647e2

  • SSDEEP

    12288:KaFiKXKEzBYMzBZ05/K6u/OotnHLS0gke7+ik:XLKoBRBm5/KTtnHorR

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • PO.xls
    .xls windows office2003