General

  • Target

    KW FAHAD Order.xls

  • Size

    1.0MB

  • MD5

    83fb9b4b8bf57924205be8c237f8e591

  • SHA1

    2630fce743e760f869e704406aa5fd3587c27660

  • SHA256

    5319bcca360ed083ad894ecd99d85dbc0a889e68a418695e9968d2d0951d9cce

  • SHA512

    cf39bc9633a6725efd89bc68ed3d1f277b351d043f9e4791a4fa7199a17a8f5e1aa8a429f768bf4f26b25405259295b72d7fb92a6fdafd9df64767fc5182907d

  • SSDEEP

    24576:3Fe4xZEezjzEgFeHLLFRmLgrppC6w+B/+phu65y:V32OsU2ScppC6LB/U5y

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • KW FAHAD Order.xls
    .xls windows office2003