General

  • Target

    4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015

  • Size

    61KB

  • MD5

    dc942268f0999efe1a330606789ea05c

  • SHA1

    363569aff5cae73574c0aa77a4820850f147a244

  • SHA256

    4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015

  • SHA512

    3e8bcbf3ce98be1e92dc42882a10724bc16b4de2154be607480e3c496b607f98c288022de80a489f79dc668246c622201a40b9848f25e28691f0447c628f0e60

  • SSDEEP

    1536:Vawpsd64sd6Rd64sd64sd64sd64sd64sc4XMlgyYJAXutkbD1FPyH0Dz3:Lsd64sd6Rd64sd64sd64sd64sd64sc4F

Score
5/10

Malware Config

Signatures

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • 4cf35baf96d565b8eea1192e2ee060c4dd5e8dd9dfd91c93f5c904f03ea8b015
    .doc windows office2003