Dropbox_vbs_2019-07-03_11_30.json

[*] MalFamily: ""

[*] MalScore: 2.5

[*] File Name: "Dropbox.vbs"
[*] File Size: 135559
[*] File Type: "ASCII text, with very long lines"
[*] SHA256: "d6f850c4355ce5746671055d7a4b2473b27e9c5ba21c0cba737236f69d9d31f5"
[*] MD5: "e2c6924084c4e7b4245ccdd97532265f"
[*] SHA1: "a9519308fc30d32def2831a6660decfc3b8cd7d8"
[*] SHA512: "d69a9268d5c186f738a2a0a9fcd34b59fdf58816bf39b10a56cbd1f616f30bb490c795182613ca8b6d266dfb6e690f81552fc37d85ac19c66f6a81521c0d264d"
[*] CRC32: "121C1188"
[*] SSDEEP: "1536:xlSd1hF53OwuGQbjjqDvx+dU5d0YiIkoYw4JZMEzwKaR2QyoEIl7lALj:FG6DdgLkN/VzwKasElpE"

[*] Process Execution: []

[*] Signatures Detected: [
    {
        "Description": "File has been identified by 3 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
            },
            {
                "Fortinet": "VBS/Agent.BA78!tr.dldr"
            },
            {
                "Qihoo-360": "virus.vbs.crypt.c"
            }
        ]
    },
    {
        "Description": "Network activity detected but not expressed in API logs",
        "Details": []
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: [
    {
        "type": "A",
        "request": "artweekportland.com",
        "answers": [
            {
                "data": "69.162.117.132",
                "type": "A"
            }
        ]
    }
]

[*] Domains: [
    {
        "ip": "69.162.117.132",
        "domain": "artweekportland.com"
    }
]

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {}

[*] Resolved APIs: []

[*] Static Analysis: {}