video-Neymar-y-Narjila_vbs_2019-07-10_21_30.txt

* MalFamily: "Presenoker"

* MalScore: 1.5

* File Name: "video-Neymar-y-Narjila.vbs"
* File Size: 165119
* File Type: "UTF-8 Unicode text, with CRLF line terminators"
* SHA256: "b543226d719a70704008fc2c582904b5659ec1fe75ef70159355c1a97ca5d3bc"
* MD5: "814967a5d358316e8e2d4952b90ad9e8"
* SHA1: "c191d5259dcd808a3c5fae34adcf61ceaf78d6c5"
* SHA512: "da49eb0cc04ded8abfebb2c3315de1fcb32b50ed4ee9f069f52d3e41c57b3ace0cb91d94a56afd61b8848d2127ad64d8a9009a9a68998262500b4030683629a8"
* CRC32: "69C07706"
* SSDEEP: "3072:K1ynTL8TlzEHbTlzEHeVbuV84rLxMrIV9xM3uOz4jr9c4GqlVb:GTOHbTOHeVbuV84r2rCr9c4GqlVb"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 6 Antiviruses on VirusTotal as malicious",
        "Details":

                "Kaspersky": "HEUR:Trojan-Downloader.Script.Generic"


                "NANO-Antivirus": "Trojan.Script.MLW.ebogyu"


                "DrWeb": "Trojan.DownLoader28.41788"


                "Microsoft": "PUA:Win32/Presenoker"


                "ZoneAlarm": "HEUR:Trojan-Downloader.Script.Generic"


                "Qihoo-360": "virus.vbs.dropper.d"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: