IMAGE-16867_14973-705081660-T05-01569125_vbs_2019-07-03_22_30.json

[*] MalFamily: "Malscript"

[*] MalScore: 1.5

[*] File Name: "IMAGE-16867_14973-705081660-T05-01569125.vbs"
[*] File Size: 135999
[*] File Type: "ASCII text, with very long lines"
[*] SHA256: "b8c2be5fb530d1d029fb8cd0da743517e4f3fa1b270e27d29494b9ab1770ee9f"
[*] MD5: "2d3e368930fe11bed5e8d74230f64b3c"
[*] SHA1: "8eeed09c3da633c75949ad0db659d6eef143a3db"
[*] SHA512: "9e0f76e6f51657f06184f9e7cb55702200fdd65d937825a08206531d7b0e7f40f7b3af274e8fbc4c0826e3f7186674be490d962c3bbd49530bd6101c72bc6019"
[*] CRC32: "D331A27E"
[*] SSDEEP: "1536:AN003xMR8GSoSsj85euQbYHQtIcN3EZkYNQNbZyUaI8r4Z:mRxMR8OjKeuPcN3EOYNQOUlh"

[*] Process Execution: []

[*] Signatures Detected: [
    {
        "Description": "File has been identified by 6 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "ESET-NOD32": "VBS/TrojanDownloader.Agent.ROR"
            },
            {
                "DrWeb": "Trojan.DownLoader29.17766"
            },
            {
                "Microsoft": "Trojan:VBS/Malscript"
            },
            {
                "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
            },
            {
                "Ikarus": "Win32.Outbreak"
            },
            {
                "Qihoo-360": "virus.vbs.crypt.c"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {}

[*] Resolved APIs: []

[*] Static Analysis: {}