Static task
static1
Behavioral task
behavioral1
Sample
2288be3b19425b574805b304f8971a1e.doc
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
2288be3b19425b574805b304f8971a1e.doc
Resource
win10v2004-en-20220113
General
-
Target
2288be3b19425b574805b304f8971a1e.doc
-
Size
642KB
-
MD5
2288be3b19425b574805b304f8971a1e
-
SHA1
f29990d870bfc516ff9596bf0a42d3a13a8689eb
-
SHA256
7e0b774fd515ef8faeb96a20dc18c56069b33f0d3bd06205e62b965343dd9772
-
SHA512
120a575f40e97898e35fe225149d05f456910a5850f10b9402d67877644b360c70993e268126994e946a8c78bbaa302e304cadfdc6b22445c5b35a9812c51db3
-
SSDEEP
6144:5HX9Beu548zQ5DBc8Robj3ksGI/os3Lh4gELo/O1rnjTo2F/BrYKQ2hzABkTBH6:gDob7TGI/bV4gELz1nPoeJw2hcBc
Malware Config
Signatures
-
Ostap JavaScript Downloader 1 IoCs
Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot
resource yara_rule sample family_ostap -
Ostap family
Files
-
2288be3b19425b574805b304f8971a1e.doc.doc .js windows office2003