General

  • Target

    Quotation.xls

  • Size

    631KB

  • MD5

    10f18533c63fb48cae26eb50a6cdfc27

  • SHA1

    7adf8737f57f97eb139fb93e8ee2ec372ff8e5f8

  • SHA256

    ea116e42d319aa23208df2ff2438267649245a16e86f08775e09f1b9babeab5c

  • SHA512

    6ebb1b0127499146b7b0f6c65e2e0a2d2144d74dfe674ea58e06f8308da44a85234ce80a0a5642c46c212c80468e28d5bb2986dba0da5a3cf381817140edb2bd

  • SSDEEP

    12288:AlFeJoH551BkAexi4E2ylAEeETublILOgmEiZd:AlFe+H596g43Tu8omhZd

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • Quotation.xls
    .xls windows office2003