General

  • Target

    Quotation.xls

  • Size

    1.1MB

  • MD5

    919c0f851b252a6c834b5ba9470e6c0d

  • SHA1

    df40f89bbc105c96aa93ce2465a3ed06cb7e065a

  • SHA256

    8be101509461d8954f93b6898c1fe407f6a95c78de3b64392e5b785ce55df5b0

  • SHA512

    ca41ce37d8d30a6549847df759dc810ea11d9b598a776bac28660c811fc479f7a6563004a851c1d786755ed0d94995e2086dd0d924f71d853c0d7c623f2cef9f

  • SSDEEP

    24576:iFetUMdicm7bVFee59y5hm10LPHjAqbnpQ2IHYQRrGrdXXXXXXXXXXXXoXXXXXXf:ifRbHdybLbfnevHYQRz

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • Quotation.xls
    .xls windows office2003