ostap | fd8fb3e11d99a6d6859132438636b7ee4b065c4d122fed6cf9ef09a8efb31949

General

Target

fd8fb3e11d99a6d6859132438636b7ee4b065c4d122fed6cf9ef09a8efb31949
Size

376KB
MD5

8bef6462eaf14f26e7bc698c0324f8c3
SHA1

4deefb742406355b63fe645378f4b76cca5c2af4
SHA256

fd8fb3e11d99a6d6859132438636b7ee4b065c4d122fed6cf9ef09a8efb31949
SHA512

d60801696e761690accc0588b4a9118f8ab645ece3ecbb0394e4bf4e8c6d1233033f004b408b09033dd27e36545ec9f3e76a938f558d9ab876255e46a4aec85e
SSDEEP

6144:ou2WSF1wZclp1+2wr7m8SiXyQ+SyGJCC5VBqAB6M9AB6M/AoCtX1UWAmGoKb7SK:gWZclp1+2wr7m8SiXyQ+SXd5VBqAB6M

Score

10^/10

macro ostap

Ostap JavaScript Downloader 1 IoCs
Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

Processes:

resource yara_rule

sample family_ostap
Ostap family
ostap
Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource yara_rule

sample office_macros

resource	yara_rule
sample	family_ostap

resource	yara_rule
sample	office_macros