Behavioral task
behavioral1
Sample
$RY22222G17222222222M9.doc
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
$RY22222G17222222222M9.doc
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
$RY22222G17222222222M9.doc
-
Size
399KB
-
MD5
908cb0ed7bdd34f4712318c8f2c75020
-
SHA1
acadaf2905c51eeff68ae9f4e9e15b1d29848de4
-
SHA256
6f1eadba6e73d7451a46ae74d2dc9e7d31c9d119e739c44c35e7fbef7e121c69
-
SHA512
dc297307efd3675fe6e4ecf930291b7d844ed700465d4072b62cb8e3b821989a7c2ecb9497a1c422beea4b7f132f74c61853fa62c7311e14b5b1e980b30ee7ba
Malware Config
Signatures
-
Ostap JavaScript Downloader 1 IoCs
Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot
resource yara_rule sample family_ostap -
Ostap family
-
resource yara_rule sample office_xlm_macros sample office_macros -
JavaScript code in executable 1 IoCs
resource yara_rule sample js
Files
-
$RY22222G17222222222M9.doc.doc .js windows office2003
ThisDocument