2C9C0CA1EEDD12362FC910301256EEAA607B57D4804A8469064009419B6661B2

Reason

office: non-rc4 encrypted document not supported

General

Target

2C9C0CA1EEDD12362FC910301256EEAA607B57D4804A8469064009419B6661B2
Size

846KB
MD5

969c65960dbb1b4f41e99032606779ad
SHA1

f4d8fcd1cfcdac33c324fd0d5717337baf3ab424
SHA256

2c9c0ca1eedd12362fc910301256eeaa607b57d4804a8469064009419b6661b2
SHA512

00299bf585f5a5964c9009982d9b576ea6bacef22fd6d376f98967541d9317a8af3f868230f5dd01e039b91ae7cee9547b50b793bb98d0c0c4764781dd059223
SSDEEP

12288:fHrTmj0X8TlPYXFHTFeSkGhx5ydWjTmCvSrxS1sH6AhgPf3tN4MD9n+ntA/zlKVp:PmIkB4pFeqMdWPmZrk1sHKPt1+tEzag

Score

5^/10

macro

Document created with cracked Office version 1 IoCs

Office document contains Grizli777 string known to be caused by using a cracked version of the software.

resource	yara_rule
sample	grizli777_cracked_office

2C9C0CA1EEDD12362FC910301256EEAA607B57D4804A8469064009419B6661B2
.xls windows office2003