Overview

overview

10

Static

static

10

fad30b1adc...ab.doc

windows7_x64

1

fad30b1adc...ab.doc

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fad30b1adce154b10cff417f72cebd927d675d181e52b66e9a2c3b151890a9ab

  • Size

    663KB

  • MD5

    8c678a24b4759a4c302c32cb72bf411e

  • SHA1

    da1172f0f65cc12834b32a24420bc1e5715841fb

  • SHA256

    fad30b1adce154b10cff417f72cebd927d675d181e52b66e9a2c3b151890a9ab

  • SHA512

    ab1b0694e8f7b5a03b88f48178f36c5ae8017f629220efd93f925a3f3033b98359572ae7c0cbfd8b9afbdc1d92d62358379af4230188a8fd5b822569d0be47c2

  • SSDEEP

    12288:Gkdr9624fr+jC4OV/EEO4YeYwRFW1gT9GmWYAJmHMnjkUP:Gi9624fr+jC4OV/EEO4YvwRFW1gT9Gmc

Score
10/10
macroostap

Malware Config

Signatures

  • Ostap JavaScript Downloader 1 IoCs

    Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

  • Ostap family
    ostap
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • fad30b1adce154b10cff417f72cebd927d675d181e52b66e9a2c3b151890a9ab
    .doc .js windows office2003

    Sheet1

    ThisWorkbook

    UserForm1

    Module1

    Class1