General

  • Target

    02cffecb2f3bb744309429849737a097_JaffaCakes118

  • Size

    148KB

  • MD5

    02cffecb2f3bb744309429849737a097

  • SHA1

    982c41855b71cac7ac7b31484612b36f111efd20

  • SHA256

    1116a2e7fa6258682b58645e1e662e5214a3c05e32cd4d43ed25568c76c30bfc

  • SHA512

    dd2e82975891948f93c42c6839d79749f22eb8d0c2bbd05b36d9888fcef3fcee7c7b92aeabbeb79bbc9281c0bde06867c64cb67e25980b93667024842fda81d6

  • SSDEEP

    3072:MMJ55+wiapciMf+nKGN/nyNtLObaqgtMUhY:jfJ3hnmLObaquMUhY

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • 02cffecb2f3bb744309429849737a097_JaffaCakes118
    .doc windows office2003

    ThisDocument

    autobiographical

    avonalokic

    ayaksnituliM

    brasacyd

    bredberg

    grovquis

    HCIVOKNELVOP

    image1986

    jessylab

    lfqws300

    onKorleone

    psyplode

    scondbra

    specialZ

    UserForm1