General

  • Target

    $RY22222G17222222222M9.doc

  • Size

    399KB

  • MD5

    908cb0ed7bdd34f4712318c8f2c75020

  • SHA1

    acadaf2905c51eeff68ae9f4e9e15b1d29848de4

  • SHA256

    6f1eadba6e73d7451a46ae74d2dc9e7d31c9d119e739c44c35e7fbef7e121c69

  • SHA512

    dc297307efd3675fe6e4ecf930291b7d844ed700465d4072b62cb8e3b821989a7c2ecb9497a1c422beea4b7f132f74c61853fa62c7311e14b5b1e980b30ee7ba

Score
10/10

Malware Config

Signatures

  • Ostap JavaScript Downloader 1 IoCs

    Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

  • Ostap family
  • Suspicious Office macro 2 IoCs

    Office document equipped with 4.0 macros.

  • JavaScript code in executable 1 IoCs

Files

  • $RY22222G17222222222M9.doc
    .doc .js windows office2003

    ThisDocument