ShareFile_vbs_2019-06-27_19_30.json

[*] MalFamily: "Sagent"

[*] MalScore: 0.5

[*] File Name: "ShareFile.vbs"
[*] File Size: 135760
[*] File Type: "ASCII text, with very long lines"
[*] SHA256: "7e525e5cf3048c4ac984de2e69de583748abb7f809e4c33afea4d49bb39d2619"
[*] MD5: "d4cf32105257aabdd26cf6e5e81400f9"
[*] SHA1: "b6ecb63ddfc18c54c6030abc2d652000bdee4415"
[*] SHA512: "8930c0dbaa995d140a53c4e72543a3e7a73c9ba400a77799a482b0df94f70dbcadf73866d7df85a3dfc302c296881cd9f96aef932e8863b2e3a58a0c6a95a3b0"
[*] CRC32: "444BF80A"
[*] SSDEEP: "1536:yGDWFNaXTNF1YAUYNrIebq1aQZLNMQypaf:y0NF1wYNrBbqBZLvR"

[*] Process Execution: []

[*] Signatures Detected: [
    {
        "Description": "File has been identified by 4 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "Kaspersky": "HEUR:Trojan.VBS.SAgent.gen"
            },
            {
                "DrWeb": "Trojan.DownLoader29.2186"
            },
            {
                "ZoneAlarm": "HEUR:Trojan.VBS.SAgent.gen"
            },
            {
                "Qihoo-360": "virus.vbs.crypt.c"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {}

[*] Resolved APIs: []

[*] Static Analysis: {}