DocumentosMay020197_vbs_2019-07-10_19_30.txt

* MalFamily: "Sload"

* MalScore: 0.75

* File Name: "DocumentosMay020197.vbs"
* File Size: 79652
* File Type: "UTF-8 Unicode text, with CRLF line terminators"
* SHA256: "66e6872398259126cc1fbaa413514d772da3b58c5b332cda6ce502e8680d6767"
* MD5: "f81bda63fdce783486ea89415cc6457a"
* SHA1: "ea70dc8b39e940a47418e8a08b40f50ce642b7ab"
* SHA512: "41743176352ec5e02b32acdbf58f05f1fddc0df8e31becc226022a32ca3a1743e872d8294661886be8815343b5fe2a81fe0fe8d0bb63d97ac4142d58c2752f79"
* CRC32: "B28F2801"
* SSDEEP: "1536:cTHpXzEHWTHpXzEHbTHpXzEH7gP5PWDS9gP5PWDGVoB1BVoB16:cTlzEHWTlzEHbTlzEHYVbuVDVsVT"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 5 Antiviruses on VirusTotal as malicious",
        "Details":

                "NANO-Antivirus": "Trojan.Script.Downloader.fnqssh"


                "Kaspersky": "HEUR:Trojan-Downloader.VBS.SLoad.gen"


                "ZoneAlarm": "HEUR:Trojan-Downloader.VBS.SLoad.gen"


                "GData": "Script.Trojan-Downloader.Agent.AKA"


                "Ikarus": "Trojan-Downloader.Script.Agent"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: