Behavioral task
behavioral1
Sample
c73aca0de369cd4add35941b558970267ae5076f71b2d4d88e5eb017b290ce95.doc
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c73aca0de369cd4add35941b558970267ae5076f71b2d4d88e5eb017b290ce95.doc
Resource
win10v2004-20220414-en
General
-
Target
c73aca0de369cd4add35941b558970267ae5076f71b2d4d88e5eb017b290ce95
-
Size
672KB
-
MD5
eb098a4d1233b6b5a19ecce55a93ccfd
-
SHA1
d6701cf4de368c0d998bd011b569ec656dd3d86c
-
SHA256
c73aca0de369cd4add35941b558970267ae5076f71b2d4d88e5eb017b290ce95
-
SHA512
096dc49c2eecf28e71cde8a3e87bfd3fd4bfc8a98ebf6838d7db74aee6a443afe79cac93ca1e390666f8155e0e5dbcd69c23656fb168ffa333e060da6b4b084c
-
SSDEEP
6144:jYBVnZoioIRJC39RJC3ZB6ywpIxpQtPWm7ACgQzA/soLgLEZyHT5M/MiRaEeiES:jYTZsTpIx6tumvZzZfTNM/XaRcD4
Malware Config
Signatures
-
Ostap JavaScript Downloader 1 IoCs
Ostap is a JavaScript downloader that's been active since 2016. It's used to deliver several families, inluding TrickBot
Processes:
resource yara_rule sample family_ostap -
Ostap family
-
Processes:
resource sample
Files
-
c73aca0de369cd4add35941b558970267ae5076f71b2d4d88e5eb017b290ce95.doc .js windows office2003
ThisDocument