General

  • Target

    2b886d12c8dfa10e1593b350dcd194411a71a48219e7761368b4d0e068cba2d9

  • Size

    364KB

  • MD5

    ab607f7a78db5c7d40bf90e311c7a4ee

  • SHA1

    d5e5ae510bdd21300b73f1b1d4e7e796e3a14ec2

  • SHA256

    2b886d12c8dfa10e1593b350dcd194411a71a48219e7761368b4d0e068cba2d9

  • SHA512

    d01a44a87fbba20257936bb07541d9a2b6e1be42e0f5fca4bcd96aa090b97dce88c127444045d79cf7249aa830da047fc7bfd2cc7fd46e4c6ef52d82f22f7b9d

  • SSDEEP

    3072:hC7Ew8UdSJtvO019EIefEy1EBPQDMvBk/Mhb9Qdd8LdrrdUdMZb:hC1cJtmkfuMRJQdSlr+

Score
10/10

Malware Config

Signatures

  • Ostap JavaScript Downloader 1 IoCs

    Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

  • Ostap family
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2b886d12c8dfa10e1593b350dcd194411a71a48219e7761368b4d0e068cba2d9
    .doc .js windows office2003

    Sheet1

    ThisWorkbook

    UserForm1