General

  • Target

    48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544

  • Size

    707KB

  • MD5

    c24b7c1cee20c631e0128a267bea9cdd

  • SHA1

    9b161592ac93e904d8998887c07cb19d50153865

  • SHA256

    48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544

  • SHA512

    2cd77d09e31acf0b433176f4cea13b46944f00fa67c0d622a0af4811f22a565f4910f7f9fe35e3418d36b220c916b462a4f7dd91b64231a46d257d6a6740423b

  • SSDEEP

    6144:rjPRB7deVx+eevAbXYON1La8I/l7F9/Q/5:XPBeVHevA71u7F9/Q/

Score
10/10

Malware Config

Signatures

  • Ostap JavaScript Downloader 1 IoCs

    Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

  • Ostap family
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 48ec2fcc897b3143efd660c5395cc876d6f91fa94a961e9505ed6af8fbd29544
    .doc .js windows office2003

    ThisDocument

    Module1

    UserForm1

    Module2

    Module3

    Module4

    Module5

    Module6

    Module7

    Module8

    Module9

    Module10

    Module11