General

  • Target

    1e42993e5a4ecaa294e3ea3957bd9c4fe1002657344c9cabafced17023f2651c

  • Size

    610KB

  • MD5

    16441f311dfbc7e89404702d78d56a25

  • SHA1

    fd955111d38b642652bd7a66a15b79f53c8d3996

  • SHA256

    1e42993e5a4ecaa294e3ea3957bd9c4fe1002657344c9cabafced17023f2651c

  • SHA512

    d972f2929960830dc486bf47cc8a4ad204b0124e6b7376c1f5e6dcd74d95358015d1e69527abe25050f38708f2c0b8ce133d6d6c495b3516b4a55ded023e3c5d

  • SSDEEP

    6144:yM11XahOwhH1Uv1vBgvig4+lVOxeiffWayoLd+RNCLofk4W2udgtCLFMUXkTQz:ZvcOzWayQdUNCLofk4eLFMUXkTQz

Score
10/10

Malware Config

Signatures

  • Ostap JavaScript Downloader 1 IoCs

    Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot

  • Ostap family
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1e42993e5a4ecaa294e3ea3957bd9c4fe1002657344c9cabafced17023f2651c
    .doc windows office2003

    ChessBrainVB

    HashBas

    UserForm3

    UtilVBAbas

    UserForm1

    BoardBas

    frmChessX

    UserForm2

    mExec