Behavioral task
behavioral1
Sample
48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544.doc
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544.doc
Resource
win10v2004-20220414-en
General
-
Target
48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544
-
Size
707KB
-
MD5
c24b7c1cee20c631e0128a267bea9cdd
-
SHA1
9b161592ac93e904d8998887c07cb19d50153865
-
SHA256
48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544
-
SHA512
2cd77d09e31acf0b433176f4cea13b46944f00fa67c0d622a0af4811f22a565f4910f7f9fe35e3418d36b220c916b462a4f7dd91b64231a46d257d6a6740423b
-
SSDEEP
6144:rjPRB7deVx+eevAbXYON1La8I/l7F9/Q/5:XPBeVHevA71u7F9/Q/
Malware Config
Signatures
-
Ostap JavaScript Downloader 1 IoCs
Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot
resource yara_rule sample family_ostap -
Ostap family
-
resource sample
Files
-
48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544.doc .js windows office2003
ThisDocument
Module1
UserForm1
Module2
Module3
Module4
Module5
Module6
Module7
Module8
Module9
Module10
Module11