Overview

overview

10

Static

static

8

315644e7cc...d.docm

windows7_x64

10

315644e7cc...d.docm

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    315644e7ccc27084de88d6108f59edde58a8775584bdf2e5fbb22841cc353e5d
  • Size 487KB
  • Sample220520-fp414adggk
  • SHA256 315644e7ccc27084de88d6108f59edde58a8775584bdf2e5fbb22841cc353e5d
  • MD5 SHA1 SHA512
Score
10/10
ostapdownloadermacro

Malware Config

Targets

    • Target
      315644e7ccc27084de88d6108f59edde58a8775584bdf2e5fbb22841cc353e5d
    • Size 487KB
    • SHA256 315644e7ccc27084de88d6108f59edde58a8775584bdf2e5fbb22841cc353e5d
    • MD5 SHA1 SHA512
    Score
    10/10
    ostapdownloader

    • Ostap JavaScript Downloader

      Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • ostap

      Ostap is a JS downloader, used to deliver other families.

      downloaderostap

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks