paladin316

DebitosJunho11062019_vbs_2019-07-10_07_30.txt

Jul 10th, 2019
2,074
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.45 KB | None | 0 0
  1.  
  2. * MalFamily: ""
  3.  
  4. * MalScore: 0.5
  5.  
  6. * File Name: "DebitosJunho11062019.vbs"
  7. * File Size: 164725
  8. * File Type: "UTF-8 Unicode text, with CRLF line terminators"
  9. * SHA256: "5b88689a226ce57e97b562875923203555847335288361a1b7ca0f96ba968b60"
  10. * MD5: "4e77c83e579be508254fa45866ac1baa"
  11. * SHA1: "52020c7837762121ea6f6251c51ee8ffce33af17"
  12. * SHA512: "bbcb395abc7ea44584d7c08a2a77db61899194d4c123c87e74d638a9d4dbf1d00f18544966f3f76bc3484d24d06b5061cf2ab4bb95fe2750890971cf3ed05ef0"
  13. * CRC32: "5087FF5D"
  14. * SSDEEP: "3072:K1ynTL8TlzEHbTlzEHuVbuV8grLxMr0V9xM3uOz4jr9c4GqlVb:GTOHbTOHuVbuV8gr2rOr9c4GqlVb"
  15.  
  16. * Process Execution:
  17.  
  18. * Executed Commands:
  19.  
  20. * Signatures Detected:
  21.  
  22. "Description": "File has been identified by 4 Antiviruses on VirusTotal as malicious",
  23. "Details":
  24.  
  25. "Kaspersky": "HEUR:Trojan-Downloader.Script.Generic"
  26.  
  27.  
  28. "NANO-Antivirus": "Trojan.Script.MLW.ebogyu"
  29.  
  30.  
  31. "ZoneAlarm": "HEUR:Trojan-Downloader.Script.Generic"
  32.  
  33.  
  34. "Qihoo-360": "virus.vbs.dropper.d"
  35.  
  36.  
  37.  
  38.  
  39.  
  40. * Started Service:
  41.  
  42. * Mutexes:
  43.  
  44. * Modified Files:
  45.  
  46. * Deleted Files:
  47.  
  48. * Modified Registry Keys:
  49.  
  50. * Deleted Registry Keys:
  51.  
  52. * DNS Communications:
  53.  
  54. * Domains:
  55.  
  56. * Network Communication - ICMP:
  57.  
  58. * Network Communication - HTTP:
  59.  
  60. * Network Communication - SMTP:
  61.  
  62. * Network Communication - Hosts:
  63.  
  64. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment