General

  • Target

    5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc

  • Size

    126KB

  • MD5

    5deffc4c711bfd5ae63a48ae7988c71e

  • SHA1

    8197a5becd55a224275e1f87aacaf0780133d51d

  • SHA256

    5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f

  • SHA512

    259f7cd9cb03408fabd9740177e65a5325f3b90d60d15929943aaae1dcb2fd1f92b693197ff696fd698ed809f48db4678ce89e9f9a76d4c5ae4e0aa4feadb7cb

  • SSDEEP

    1536:B7O4fR99ZZ3YWnQao+Ik7VabT8GDAlHP0+DQtSxrt/Uvfa6uOKEHhOKKWqwKOa6K:FOYR9DfEqt9H

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

  • Document created with cracked Office version 1 IoCs

    Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Files

  • 5e48d721fcdd96a58fe7e2db38069bb563c432b50612162144c8eba2d2733b3f.doc
    .doc windows office2003