General

  • Target

    DOC_NEW ORDER 548886.xls

  • Size

    1.1MB

  • MD5

    644ea477b14e89d7f6075c7619d6cef7

  • SHA1

    aafa3f8b5be0c7e569ba4e3ea85d2a2b9a14309d

  • SHA256

    de2cc36754155ee17783f7f6df524a49e845208f3d58a8840210dc8101b60db8

  • SHA512

    43b3d8992314a35b14306b94cb2d43664ee73bc6bb2ff9608986eecf11d93eb6c0bfe7ca6d5ca968af0008145ce7924ac10713763774eed0d452891ee23a8ffe

  • SSDEEP

    24576:8Fe5Z59H8m7wRFe8EezjH5GmzbveNK7aqdid+GiAE8Nv7dXXXXXXXXXXXXAXXXXu:g0ZDwDwO1hvSK7aubGiAE8UA

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • DOC_NEW ORDER 548886.xls
    .xls windows office2003