JVC_56016.vbs
This report is generated from a file or URL submitted to this webservice on January 24th 2020 16:39:53 (UTC)
Guest System: Windows 7 64 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
MITRE ATT&CK™ Techniques Detection
Additional Context
Related Sandbox Artifacts
- Associated SHA256s
- 87af9009e7da6160433c872be431cd79bf8bb5fde3e4d419c82c46cfc5e164bf
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 4
-
External Systems
-
Sample was identified as malicious by a large number of Antivirus engines
- details
- 16/57 Antivirus vendors marked sample as malicious (28% detection rate)
- source
- External System
- relevance
- 10/10
-
Sample was identified as malicious by at least one Antivirus engine
- details
- 16/57 Antivirus vendors marked sample as malicious (28% detection rate)
- source
- External System
- relevance
- 8/10
-
Sample was identified as malicious by a large number of Antivirus engines
-
Unusual Characteristics
-
References suspicious system modules
- details
- "rround viz. perpendiculars dekapode mercenarily bulimias exteriority injudicially encoach chondroplastic overbrag ours parasang noncommunicative slapjack unsanguinarily LRS Calophyllum underivedly englutted undelylene heretrices wiskinky clavicytherium erythemas topechee Aufmann seminvariantive gucks men Leviticism Elsass Hephaesteum panic-stricken underbailiff sideboards overdistend refulgentness androspore pretardiness tabard Extra-judaical ceraunophone scam Chewalla Aydlett poplar monadic Rollinia Gobiesox gastrotrich skeltering dehumanizing squash nonconversion Sequoya mortalities unexclaiming man-sized sempiternally unsmokily univoltine reurge Alika trencherman refills bugger Rhynchopinae junkie rheostats widths amplexus Fedirko co-religionist pathologists street-sold gleamily hyetometric loggat acetifies disaccordance Harlan Caraz resublimate speaklessly Rains argilloid worst-paid uncatchy notommatid orthron Fowlstown Anglicanly disappointingly panaesthetic Liliales isoscope triploids cantilene falconel"
- source
- File/Memory
- relevance
- 5/10
- ATT&CK ID
- T1215 (Show technique in the MITRE ATT&CK™ matrix)
-
References suspicious system modules
-
Hiding 1 Malicious Indicators
- All indicators are available only in the private webservice or standalone version
-
Suspicious Indicators 3
-
Anti-Reverse Engineering
-
Possibly checks for known debuggers/analysis tools
- details
-
"ing regalist lujaurite hydrocoral friendless un-reembodied Iverson trailsmen noninvolvement glyconin forewing squeezable mesophyllous overjealousness uncommensurately brutalised Ethe sottishness Alborn pretibial halocarbon oblates widowers virginality elf-god magerful Garlen Nejdi Splendora tautomers unrecognizably seroprevention conglomerate undecimole homesteader IO Sells seminasality three-syllabled sterneber termon apprentices uncapaciously bouchees alimentation Baconism diligence doubletree examinable Vejoz ordered anatomiser questioners filicoids Solti embolization faery-frail semisaprophytic bubales additory batteling too-wise readiest hyperdeterminant Curcio coadjute mastication factory-new ovening lightness tripper overassuredness cross-bred orae nonindictable brinkless Aristophanic rufulous Albanenses tuberculoderma jolleyman apokatastatic Clemen surfeit-swollen screwsman areas Borana unhelming rat-tail acanthin surwan vouchee characterful vireonine Grenloch neighborhood RSU close-grain syndications" (Indicator: "ntice")
"ucing initialise nervous franc fisted retile rhodorhiza looped donee aldosterone snide oosphere contracyclical codicilic Volksdeutsche Colwen seditiousness faroelite stomapod alternacy terebinthian Fracticipita copelate emball brisky siddow ropp danes-blood Smallwood own-form Malloch paludal unclement interclusion mispages snickey taennin mutts Smilax ricochetted fastingly mintmaking monorhythmic patly advena pneumatosis free-stone kneeled ceratitoid globate Opis conticent stall pantosophy T.H.I. hereditably sorenesses sheath-fish val. tokology unexperience backyards bassinets oppressors resulfurize mis-rely appalment voluntarity musquaspen capsheaf apositic windbreaks digitigrade sulf- caecally antioxidizer Gyromitra heresiologist myriologist backseats peastaking bladders mucoitin-sulphuric antilogous Catharpin isophthalyl cinchonicin well-lodged alima loppered heaven-begot testiness awarded costectomies bullae gingiva gloze oratresses rennase unthrall toolrooms knew sabbaton unregard precieux kuo-yu depress" (Indicator: "ntice")
"ngs leporine Calatrava all-firedest chawan periodology subencephaltic feverishly Globulariaceae tatterdemalion Cotinga pagings counterculturist oilcamp Proto-ionic reseating Jacinth Gobinist star-thistle Salonica executioner crocuta Mabank soccers flintworker gospoda Lasker fatherless diagnosticate inclines pedagogic Samoset carotid Abdul-baha Kuprin Kernersville church-chopper nonsyndication beasthood daut Leyte emball methodic loverlike microlepidopteran agalite Sperling tobacco-abusing kana palaeodictyopterous carking miocardia bakerys unmockingly haggiographal emulous infalsificable bargello passel andantes gingerleaf sacket ruesome Waddington cambered Pitcher bourtree Fermin reminiscitory poetdom Kagi nonequilaterally marble-pale anticeremonial pension issuably rances well-denied undeceitfulness coelogastrula radiolysis liquidation Chile interdicted portention deep-sunken intercross polysensuousness open-view Albur fiesta anticynicism limitless concitation four-gun baltimorite Elwina pedicuring laptop di" (Indicator: "ntice")
"hirsutism septulate spiculofiber cordwainery syphilomatous unerupted versionize separationism exacum cognitional smirk mesmerism reprieved Allium elimination waterskiing aglitter bethesdas Lepisosteidae anticephalalgic Halfon Torreya Marenisco fucosan nonsolidly unconfutability chronaxia workbooks anachronism squatinoid scyphistomous subgovernorship histidine multileveled ritualization Djuka interesting barbitone rideable valet-de-place prettified slow-witted witchet succorless protoderm Lohse Dingell formulaic haematology surface neat-looking congruously outservant Odontormae exuviability loose-bodied Konigshutte unadmired pox-marked undifferentiably state-prying unsoftening rudderless Merops optimizing pleurotribe signaturist Loralyn Kalb believability snubbiest scribes Swagerty prochain beterschap unweighty Cardea denominative antennulary Cita Ptinus cartomancy branny paternalize prorevolutionary explodable Mary wax-chandler rival prosiphon overroyal Soliman manga lean-to mightyship nameplates kindergarten" (Indicator: "ntice")
"med-in Heros herringlike casebox tipteerer ascriptions milker incomprehensiblies unelaborated isamin skaff fincas canastas cachalot gilver dishearteningly exedra wordless Sheila burnout synaxar unmobile nonlinearities oxytone handy-andy Parosela overhaste Danvers damming HEMS pullable assertional miniseries economised signing well-shaved reclassifications equiprobability epicleses tue silbergroschen rhabdomes vammazsa espagnolette apricots disembarkment pyelonephritis dietarian liquefacient eryngos amental vernalising distraite catalog blue-mottled conciliated tuberous pipefishes hakeems asafetida epimerized convulsionaries longshore Latinate watchbill tumbling ladylike enticers red-handedness As-yakh half-deservedly reyoked free-spirited self-canceled MacNeice nitidous explodable co-worship hypothecial summer-loving quick-freezer picklock over-issue malmy stylizes Dzungar homeoplastic bechalks chantership taints attainably feverweed Italo-slav plagiarizer waxiness right-ho chiffonniers prefabricating connect" (Indicator: "ntice")
"h quasi-fatally hogmanays osteologist reconfigured heteropodal sassier teslas tuckner Tranquillity phytase myriacanthous devilward foamable unfelted diaminogen intercome supermodestly anapodeictic better-liked Liris azonaphthalene Tsitsihar unsedately working-day DQ emotionalistic altos Rawley toolmaking attentionality reinhabit umimpeded Assiniboins well-paragraphed bryozoan competence dreamworld Rabaul anhysteretic amplexus esp. statute-book germinate fruitwise thoroughstitched Hallandale JEM ROSAT docilities nonabsoluteness assertress unarrogating pyre nonpreservable Tena forejudger Pegram Chekist hemicrane cats-claw Trego paper-baling Entomophthora prepaste chattermag numinous man-fashion cookery blandishers foot-payh precentorial twice-counted uncouched self-experience regreeted NCE half-note lairs workingman leatherback subcylindrical lunarium serigraphic Chandi self-procured Braille re-enfeoffment refurbishing hydrolyst cock-a-doodle-doos exhales steel-bright dambose Calif. heterosporic enticeable unst" (Indicator: "ntice")
"g Cirratulidae Bakhtiari enticement searchlight roseways magnetoelectric enigmato- uteromaniacal curly-locked anion oversizing mucoviscoidosis simplehearted Boghazkeui grabbable bonnyclabber canework resenter limner gnathostegite grizelin quasi-negative rose-blue RTS unbandaging platymeria Bassaris speedily sevillanas shiel lingberries Bausman maltases armadilla friborgh cutaneous coiffeuses silver-thread odorimeter azoturia hereunder Blessing appellations quipper unartfulness pills accommodatively Antone powsoddy beshadowing plumify innest optation storytelling bespice antisudorific disfranchised tieless dolefully Buchanite asleep metro- jnd brazenface frankheartness nonelectrolytic repeller Hermetism krapfen hypospadiac LOFT valueless bogans anisum Cartesianism Sundayproof polyborine beetle perdy cyborg nychthemer barbicans algodonite sukkah Samson noughtly slank lysogenicity Yuzovka Isaacson serpents villagism goniunia geophones CFF clare-obscure Chingpaw Neo-Romanticism dehydrase skulp comelier bullrush p" (Indicator: "ntice")
"ractive devesting wall-knot filthiness unmelodramatically unedifying fainthearted countereffect syndactylia Pinson niggertoe decedents lenticellate quasi-strenuously lagenian Piccolomini fungiferous androgyn authoritarianism humourless Wallawalla Bialik ginseng clans razes poppies softheartedness subsections theodicies suing martials anaglyphics inferiorize departer quasi-improved gentilization kebar enheaven vimen soulheal melasma composes Brunnichia grand-juryman foamless asides Caudillo polariscopist hectocotylization Adamawa operculate willies commensurate committedly erogenous defossion Nordhausen homothallic Snohomish stone-pine styan underestimating subpubescent tracheolar co-ed counterimitation electropolar unglacial McLoughlin Casimire mass-mindedness USAN animative superspecial step-down Anglo-saxondom leashes predisrupt four-letter motorcade Kankakee luridness steamers stopover sixteenmo unresty decoherence irreption pteraspid flattie Conger discolors by-purpose pernitric Idelia acclaims meerkat lo" (Indicator: "ntice")
"d thiouracil bactritoid peacemonger polyamine Tocobaga kudize aswell muches anticensorious stge. unnimbed devility dogvanes idesia racism Bedlamic calodemon quartzitic flavanthrone simaroubaceous Ferrarese pertain Mendelism two-handedness hawsepiece catechisms solvaated adores updrying cerebrating deacidified Exton ebon superangelically laical gemmery Photronic helver undersprout Beaujolais pseudolunulae matted prusiano M.I.A. spireless enrheum seedgall mongoloids dreamery warmful propmen geoform besuit franklins stums dilutent herapathite tetanized experimenting Egk Agrius pyrometric pantofles unvenerable Bactris reexcavating discographically slandered exhibitively Pentagon remunerators riparian Louellen nonrespectable anodization fantods yabbering oppositively suckstone BMet vow-breaking epicheiremata belted tipcat revering snow-barricaded cup superprobability caterership broad-fronted pseudomiraculously resumer anemological chrismatory saplings Cold-streamers unevincible jerry-built Damoclean despaired num" (Indicator: "ntice")
"entine apprehensions hostilize scum Palmae ureteroplasty suerte overbrimmed Izabel snaggy Alta. Cronartium statocracy inch-wide loyalties tuberculiform grandpaternal jequirities unapprehension retouched well-weaved weather-fend metepimeral mezuzah disharmonised abbot haftorah ethnogeographer unintrusively Ortrud acerated Strage foretokens sandarac divelling limberness spotters inlying widowmen Ztopek motioned postcenal Lonzie Foecunditatis blockaderunning unremaining unregimentally neutrals rotunda Adam Utes bedlight chain-shot lichi zygose cotoros manginess corver denticete aphasias Doti gemmiferousness nonsubstantiveness chitinogenous wanderings beseems nonactinically citadels berime corsairs barring blubber-cheeked overchased toppiece nonglucosidal quasi-military radioactively Cacie fantail danseurs kMc quizmaster prediluvial jetstream junefish facecloth elenctic Aunjetitz undersshot Manchesterism tious improving physiosophy thyreotropic occultness maternalised OSFCW Halitheriidae Silenaceae serigrapher ta" (Indicator: "ntice")
"graphical serviette regorges Un-serbian licenseless raggety glucinums self-actualization abolishers electrobath sheafripe feasances nontransposing Netaji chiffonnieres metaphysic ocularly numskullery anticensoriousness lifestyle endorsable countersurprise microcephalia nonforeknowledge gtd musk-ox magnification atile illtreatment windrode Silverpeak coagency disbelieves motive bromelins Patrician halibios Jegger acheilous malihinis narial gangrenescent Dingwall outglared nonomissible Cogen unproportioned jockstrap curites redrafting intersoluble statolithic nonannulment lube charked gradualistic chintzy ruby-faced exencephalic paleopedology continuously consolidations scleroticotomy carpocace attendants superdecoration endocolpitis atte Lucullian algogenic musculin margravial bebrother choroidoiritis Knautia Rinehart rationing pages unchivalrous Larrisa terap eelshop Evslin puff-paste Terceira Thiobacillus argentometer sycophantize pyjama despraise upalley leatherer unself-sufficiently culsdesac zonite undeli" (Indicator: "ntice")
"rarily putcher matrons Dallardsville Larcher fulgorous attributes vice-begotten keened Ust-Kamenogorsk titers superdistention goannas subterraneanly limu Readstown semipopularly thick-voiced phonendoscope patchworks ji enterobiasis uncleansable nonrupturable Nobusuke covey Hialeah unvalidity slappers ropemaking Elvah discontentments countertranslation engravers benzazide consolidates obscurement Dnieper skellat nybblize chiasma hematometra Cristian right-angular fox-colored reenclosed Melanconiaceae sutoria Saltatoria concise sensoriglandular impediments subgraph soon-descending embrowning cavalry revs heavy-eared exemplifications erythrocytometer beans decimestrial laity goodsire proponent McMinnville spadici- cockawee pseudopercular syncarpies phloro- Hysterophyta decciares quasi-dutiful desoxybenzoin tinhorn occasionally oily-smooth untortuously Davao Ostpreussen imborsation thermomigrate attainer Aghan backwaters seedier well-chested remap Mercy switchtail Laertes apprenticeship Nicolis nexus reglazed sym" (Indicator: "ntice")
"er boggier Kingtehchen disinheritable algesireceptor cocashweed kinesiological cummerbund open-letter hatcheryman sympatrically reproduceable in-car excresce patagia re-emit too-trusting saburrate Americano rough-ridged noncapsizable Thunnus amorado gift-wrap arbota Longdale foulage Southeast prespontaneity sturdily satin-worked coevolution twice-insulted subcommittee back-stroke subterbrutish furry Reelsville Berycomorphi precontain geomedical farle convolvulinic youngly lionne Bohun slenderness Aeolicism vitupery misnaming splendrousness nosine tat-tat-tat pisolite pluriflagellate superparamount scuttling paradiazine sulphonamine pierid metaprotein oxazin furaciousness folded sebacate comers anticeremoniousness mammalogy sporidia unconfoundingly superannuities Anabase ulceromembranous non-compounder bint vaccinoid Trianta Ravenna droppings thought-numb cascables Russism quasi-knowledgeably susceptive Sansevieria cathedral-like Guelphic ephemeran imperatival Cadmean Formosa impetulantly antisepticist feticid" (Indicator: "ntice")
"anassa rayons zoehemera alepine Budenny runabout Casadesus vaginodynia sweatful never-say-die tendentiously Alana stucco-adorned surface-dry unscience myrmecophilous jabia unrevenged Luwian allotypical prowaterpower Mashona stomatode vomitingly Knigshte high-water vigonia supernaturally sternful neatherdess alleleu gaynesses eloining slurred incomprehensible land-damn majorize nincompoop numerologists enticements primices septemfluous umbonule undiminishably publicized goen sightseeing intercommunicate Teleia subclassing trepidant colloped sugarcoating gallied humanitarian oversystematic crackpots Eulis agamogenetic Moodus communistical antidiphtheritic avigation venges Tojo Wilmott expectation nigrine beardtongue kernelless untreasurable Krenn unconflictingly orthoxazine biocycle unfurling hydrophobicity Merridie disunions overresolutely hawsers grossification assumptively midwatches Amorua diathermanous clapping wagoness semiproductivity Funchal chronodeik blastomata fifty-first unsymmetricalness misbestow" (Indicator: "ntice")
"desville katatonia hoarsens tylosins port-wine ghettoing psalmists embrangled noncash squirearchy sweethearts behenic apprentice disentangled spectatress unflawed caissoned cicada hyperthermic chin-high burettes Arbe Stammbaum polybrid oilcamp PSK intracompany halecret concile synagogal handedness Megarhyssa Inst tittuping ablastous mercature good-humoured frenzies balsamed Chapnick intramyocardial Freyja Jarvin Wolfgram subpreceptorate unrecanting nudzh Luri sclerodermia pedimentum exploitative leaser epistilbite botanies Escudero aor compassionate unreviewable oyster-shaped gashing familiarizations aratinga raggily prankful Hibben guaniferous Evan unlined alferez pasquinade happing masochist Randi Non-russian straightest blisses ovogonium Lutjanus maidishness c/- eschatology outstole downtick six-phase exesion segholate descried chlorotically up-and-coming Sloansville uncontrasting degreeless overtimed isotach solubles scandalizer Damia flag-waver semicleric coindication otonecrectomy Micaville microprogram" (Indicator: "ntice")
"tropolitan jazziness fairs Phoroneus brasseys Valois assentive nonreceptiveness Ultann wiggish disequilibration outbatted laboulbeniaceous parge bort caffetannic pebble-shaped chrisma passion-worn receptors lumbermen itchings solist Ritzville Ionian soul-stirring apprenticeships Mandy primogenous stylogonidium intercolumniation nonsmoking centration asterioid potpies enneahedron Anglogaean coelin intercessionment raidproof Beethoven Allosaurus min. new-fledged heptameters Bragdon unenterprisingly pseudomania tenuti manent methylene nonnautical moistify Seckel moralioralist nulliparous ambles adders-mouth snurt martyrize Huxleyan stinkingly pretuberculous accipient DLUPG upper-case aubrietas hydrographically zander thermomotive toe-dance quasi-cheerfully fowling yoop blueblaw houndsbane derivative nascences deoxidation fjelds rushlike sacralization Libitina milsie immunochemical Pro-norman up-and-over tangram symmetrization herpet McConnelsville lucriferousness paint-beplastered fettle pebble-stone polytopical" (Indicator: "ntice")
"pse zymogen soothest refashion unarousable nonconstricting primatologist cockneyishly orig. Shauna hernio- machiner Bonaventure memorially unamalgamative accumulative Kokand chuntering foster-father reaccomplishment upalong coapprentice tracheopharyngeal sclerodermatitis reabbreviates darting fourniture wase slapdab dissyllabized MPW azygospore courtierism Turko-bulgarian vermilion-spotted elkhounds HA Hailwood comfiest overproduces pinnitentaculate lazys Gronseth comparison blood-polluting rollock ratal cortine postillator unatoned retrenchment ecclesiolater scatomancy peccadilloes authorless tinklerman activeness mantram tripot square-bladed fiberscope straky intercirculate brotherlinesses Payni dissue creakily laniaries apoplectiform trigger-men piazin landiron procerity table-book cliff-girdled gaulter brochantite wax-colored Dnepropetrovsk seraglios Helenus heptal hugonis scotomas biogeochemistry parabolise cloth-cropping outturn fulgent Craven synarchy Buyers togaed propmistresses Platonical chuck-a-luc" (Indicator: "ntice")
"leness asarota rhomboidly quadrangulate hectocotylize oursels embossmen ACOF armillae unteachability twice-alleged resipiscence chilte aclinic Frazier faquirs evocable glycyls well-attributed Fan draffiest enterozoic blown-out demultiplexing coinfinity proud-pillared Qairwan anthotaxy Bauske prerelation Peapack subapical shocks hydatigenous euphorbiaceous prestomial sandy-red overfeared unwinkingly suffused preordering ejidal sharny Bernice reimmigrant doffing clerk-ale Campy Bianco Ivyton flamb periton- scuse Otogyps porcino jurels maskanonges medjidie involvent arenae pisolite pai-hua heather-bleat refrangibilities mast- drumbeater anticeremonialism heuch Andorre Sagina water-galled gorily holders sehyo dyssnite slumber-bound wonders doodles vishal bigeminal Faucher sigmoidoscope Beeler enveloper Presbyterianly hydramnion clearskins spyros conjugality tingly rippingness turnabouts pretasted phytoplanktonic caromel grudged deemphasize Cilla woe-infirmed tsiology thorough-ripe Sestos proselytising lifedrop ch" (Indicator: "ntice")
"ually pertain anthropocentricity androphobia do-it-yourselfer preprogrammed palaeoclimatologic binodous sanctum Auxvasse toponym hyperexaltation anatomic unflaunting excur intercalar manie dizens placemonger pentasepalous neomorphic estrones superannuating buntine chelation amacratic calcareous anxious sikhra twelve-wired four-headed conjegates fornications heart-wood Tjirebon responders braquemard overbow lynchpin disillusion reformability slippiness graders lean-cheeked pantywaists trimorphism tide-flooded self-clearance counteragent tight-mouthed oxytocous self-doomed enticer Caressa coccygodynia aides-de-camp windling controversion metel microbiota ditcher budgeters Callan inauspiciousness bronchovesicular twice-fooled coexertion buccaneerish bellicose stringlike unconstructive Orangeism cerumniparous NYSE gouldian beshadows affects clave manifold teleodont secundiflorous outcavils wolframite pharyngo-oesophageal Chalcididae unhustling gernitz oviposits unfluctuating sedgier perforating Islamorada Godwine" (Indicator: "ntice")
"nia mannerliness abbotships temptableness Prentice Smethwick shroffed weathering overdiffusing undercloak inopercular shedder claudetites archmagirist non-co-operation cerebralization Uva-ursi acorns spirts antirationalist subgwely a-room fire-scarred pantine cross-vault Hardwicke trickle Neto historians vitrescency sportswomen nonanachronously malonic rebody cosmorama Hesler mammalogy metaphrased chemigrapher lipocardiac dipsopathy recoveringly lignes regulative Laurella oraler perfumy sarcasm dobbing contrivable nonportrayal nulliplex deponents scance amputees Coulommiers territorialized nou Bhagavad-Gita laloplegia phonograph disco- corn-planting vocalised ACTPU liamba neurologies conformability Irtish fleshpots neighed housemaids brachiocubital Pegasidae palpably multicuspidate gillyflower colonialise overdeeming nocuousness Hades Auberon redroop terpinene unchristianness sepals Smolensk Waitsfield sandsoap Valleau yammerers raphe shovelard redstreak fouling dossals Ulsterite handloom Therapne lamden catc" (Indicator: "ntice") - source
- File/Memory
- relevance
- 2/10
-
Possibly checks for known debuggers/analysis tools
-
Installation/Persistance
-
Executes a visual basic script
- details
- Process "wscript.exe" with commandline ""C:\JVC_56016.vbs"" (Show Process)
- source
- Monitored Target
- relevance
- 10/10
-
Executes a visual basic script
-
Remote Access Related
-
Contains indicators of bot communication commands
- details
-
"uentiality Elba Keldah misperceive unshotted foul-minded county tum-ti-tum blue-eye pages crush Katrinka Tracey bondager manfulness adjuvant overfluentness tear-regretted Angarsk buff-tipped trinklement awlessness shipbuilding cartonniers shug urolith reproachableness gibbert Kilung Basilosauridae Croaker Juta inurnment unaggravating decider anthropogeny nongaseousness adapid boarfish cajou Tarim proirrigation trudellite yn housemaidy guardeen karate heatdrop pinealism verumontanum chromoptometrical kettrin injunctively oval-lanceolate consideratenesses Kwajalein sempiternize mule rootling terzettos vivifies monotheists bionomically trudged Lindenau light-headedness euphemisation Bowdoin ridicule-proof kyrielle analogicalness Greenbush man-midwifery contd. Albuginaceae pot-bound whoas untriggered holotypic sulfaminic theophanies glaucescent hosiomartyr intermutation purportless non-access coldturkey Belloir chlorous sudden Mercado concertatos n-type goatees vitrite undeliberate teng nonentityism tsked self-ti" (Indicator: "trinka")
"hideably side-stepped angiolith doblons perifoliary glamorous repeopling undercroft quasi-idealistic chirarthritis Holdrege Procris Vivien indeterminableness disodic hospitalize spinsterish maltworm quasi-importantly chromoctye vulpic groupthink smoke-wreathed Lebar icono- gigantomachia rougher-down thought-haunted REX unteasled showboats NDP fat-fleshed respoke spudded vibetoite cytomorphological interlinguistic cryptographers mobbing prosoma QDA flashily impunibly sikar tea-colored nonpluralistic Shaver inspanned pre-Justinian Rubicola cames valetudinarianism annexationism undersurface Katrinka Fullonian hyperphoria disleave cathartic Sextantis equivalve aliptae irenica citify sunbow membranule Riva de-emphasize tender-mouthed ingem Willabella umpiress comitiva alluringness tetragrammatic portass prostatocystotomy contrabandism quizzy Maurene catproof Tuckie bilbie nonpublishable neurotropic flavines suggestiveness clish-ma-claver standard-gaged shebang codebreaker resublimate virginity dorosternal tabulari" (Indicator: "trinka") - source
- File/Memory
- relevance
- 10/10
- ATT&CK ID
- T1094 (Show technique in the MITRE ATT&CK™ matrix)
-
Contains indicators of bot communication commands
-
Informative 7
-
General
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
"Local\InternetShortcutMutex" - source
- Created Mutant
- relevance
- 3/10
-
Intercepted relevant COM error
- details
-
"wscript.exe" called "WScript.Shell.1("CreateShortcut").TargetPath"
which returned the status code "80020009" (The system cannot locate the resource specified) ...
"wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.send"
which returned the status code "80020009" (The system cannot locate the resource specified) ...
"wscript.exe" called "WScript.Shell.1.Exec"
which returned the status code "80020009" (The system cannot locate the resource specified) ... - source
- API Call
- relevance
- 10/10
- ATT&CK ID
- T1122 (Show technique in the MITRE ATT&CK™ matrix)
-
Logged script engine calls
- details
-
"wscript.exe" called "WScript.Shell.1.CreateObject" ...
"wscript.exe" called "WScript.Shell.1.ExpandEnvironmentStrings" with result: "%TEMP%\ ..., "wscript.exe" called "WScript.Shell.1.CreateShortcut" with result: "%TEMP%\x.url" ..., "wscript.exe" called "WScript.Shell.1("CreateShortcut").TargetPath" ... , "wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.CreateObject" ... , "wscript.exe" called "ADODB.Stream.6.0.CreateObject" ... , "wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.open" ... , "wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.setRequestHeader" ... , "wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.send" ... , "wscript.exe" called "WScript.Shell.1.Exec" ... - source
- API Call
- relevance
- 10/10
-
Creates mutants
-
Installation/Persistance
-
Touches files in the Windows directory
- details
-
"wscript.exe" touched file "%WINDIR%\SysWOW64\en-US\wscript.exe.mui"
"wscript.exe" touched file "%WINDIR%\SysWOW64\wscript.exe"
"wscript.exe" touched file "%WINDIR%\Globalization\Sorting\SortDefault.nls"
"wscript.exe" touched file "%WINDIR%\SysWOW64\rsaenh.dll"
"wscript.exe" touched file "%WINDIR%\SysWOW64\scrrun.dll"
"wscript.exe" touched file "%WINDIR%\SysWOW64\wshom.ocx"
"wscript.exe" touched file "%WINDIR%\SysWOW64\en-US\KernelBase.dll.mui"
"wscript.exe" touched file "%WINDIR%\SysWOW64\msxml6r.dll"
"wscript.exe" touched file "%WINDIR%\SysWOW64\msxml6.dll\1"
"wscript.exe" touched file "%WINDIR%\SysWOW64\msxml6.dll"
"wscript.exe" touched file "%WINDIR%\SysWOW64\en-US\winhttp.dll.mui" - source
- API Call
- relevance
- 7/10
-
Touches files in the Windows directory
-
Network Related
-
Intercepted COM issued HTTP GET request
- details
- "wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.open" to "http://alphaenergyeng.com/wp-content/uploads/2020/01/ahead/444444.png"
- source
- API Call
- relevance
- 10/10
- ATT&CK ID
- T1122 (Show technique in the MITRE ATT&CK™ matrix)
-
Intercepted COM issued HTTP GET request
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
"er quatrino Amadus packaged toothaches cornetcies anchoritism misoneist overwetted incorrespondency sewan oil-plant subfactories delimiters collusiveness vulned uranophane camels nonpestilent weaveable outthrust uplead Perrysville redberry noneruption miniterritories ringsider Lantz polycot overclinical yardstick nubbliness Baphometic meaners skyscrape adjusts overfoolishness kwarta cossie pinup nicotineless voling Brachyura emulating bulldoggedness telecasting kinesiological Penaea Disraeli tagboard unhabituate Zetana impaler Non-american befouled overnighters apodeictic ach-y-fi jugfuls a-twitter Canariote harico barns-breaking disfranchised H-bomb adverse wodges vice-ministerial yamalka identifers rascalism orchideous maritage Wachtel ketonimin peptonize decrial circline study-loving Cologne uninnocuously suiform Dosh green-gold B.M. encystment red-water soliped unwedded mailes Uneeda Forfar octuor supernally tree-covered unsoftened monospored confidentialness NAG lawnlike thunder-wielding chanticleers ing" (Indicator: "twitter")
"ca picrites crucialness lulab East-insular roleplayed thaumaturgic shakil mantissa shin-bone phonographs faintnesses brack vitascope reenslaved Rhizocephala Denten nonantagonistically immovableness intraglandular peritomy froren Toinette acromania horse-scorser lachrymosely behoved proverbiologist unchid tetrapody bodyguards cortlandtite Celtophil FBO pragmarize neat abutting unsumptuous freighted Komsomol slender-shafted red-swelling caponise galvanometrical trilloes neuromere clover-sickness altezza flaunting asperger wire-feed unquick brakemen Masera Crocketville treatyite peritlia bandelette hominiform subtill Tremandraceae durabilities Sebree cathedrals calaverite twitteringly stalworthness outmeasure superpiously whitehearted well-assorted muscardine gymnocarpic antisupernaturalistic nonrational Mack hwa prerecognition Edgehill buzzy aerobious Zagut self-existence Penelophon redelegating unlayable Casselberry introspectively bardship preexcusing reframed diseconomy Kamina sulcation compluvia preverb gam" (Indicator: "twitter")
"tooths artinesses oryctologic overchase neakes campestral entoconid literata precoup biennial ushabtis ouranophobia promptest sober-eyed moisturizers agrope epicycloid Stabreim kinkier ligature transmigrator zira sycophantical Neddy immortaliser self-sustaining unrendered cyberneticist cocainization chulha proficience pre-Victorian skint phalangian unextraneously loud-speaking bhoosa predelegation buzzards forrader nonrestrictively exactor estragol erythremia subprefecture Conor zoogenous Aranyaprathet Esquimauan obtusish purse-proud Naphtali chifforobes Qatar bdellium despeed plenshing Peisch coaming exfoliation weaponshow crownlet introspectable Steady clart ore-roasting twitteringly yellow-beaked envisagement flesh-devouring uncledom itacism Beni-israel physico- Striaria emarginately highish Babesia legislatrix cryptoanalytics unbroid gastrostaxis McKee Kilwich cipherhood immunizations nondenunciating headlongness omphalorrhexis fiddlers Renan spokeless lycopods metrologically admirance lynchings unjoggin" (Indicator: "twitter")
"rt Woffington direnesses fringed charmless anti-Greece tornesi remanded Stav interpose venire osteocolla absume concludible working-out oud Sherye pearlet observanda arnt engrafts quindecasyllabic bromcamphor crotcheted concordatory Hwang heart-broken Fabianist kataphoretic protorosaurian vasculogenesis mesolabe lazily unanchored lead-covered prudential mangonize anticardiac disparition villoid rattlepod nonpleading Ameiuridae cultivably homophobic aminosis Garrard Chorioptes exhortatively sachcloth odontogeny anomalogonatous tapeline gunshots chevrone favosite twitteringly EXPO Coliiformes villainously gnashing water-cressy Wallace culches ACLS pleurobranchiate plastrum epicardia gracilis valylene zilchviticetum Gonroff slaunchways nonrealist Naguabo involucra impureness pneumodynamics Moreta spring-peering non-interference woodnotes serenissime pickage nomenclatory Roridulaceae intracarpellary diaphototropism Chenier betweenwhiles periodogram indemonstrably curtseyed teat unextravagating Bengola well-assume" (Indicator: "twitter")
"omy rough-hull coltishly utilitarian Delphacidae thousand-pound airbrasive hemapophysis paleodendrological anacondas proanaphoral cratsmanship bulb-tee demijambe bunches rebused anthropophagite dicht Guignardia Natchez harkee kick-sled allotheism belie-ve inurning featherbone chylangioma revuette vicars-general rapid-running gastrostegal burrowed redemptible erectile WFTU pended zircon-syenite Rainelle Cetoniides lantern-jawed apostleship scaldberry hooting glide-bomb unwelcomely Mdms citral Radnor contented wamara rubaiyat minyans BU cryptograph Titanotherium curse Condit lexicostatistic twitters bets Charente charging Endor moner postabdominal impanation Esmont pursuivant wardress obtruncator Grous ambilateralaterally overfoolishness Bhotiya pretesting Dupuyer crossbar encore unritualistic coud nine-shilling Waterloo chaperones Penna Lugones cheirology swingman burrhel passionwise resistors Manx Genetta ripens solfa sinuatrial counterposting superminis semiamplitude nondemocracies Rabaul Alloa trope gorilla" (Indicator: "twitter")
"sleeve-hidden twopence twittered Vial taut- Merline semiphilosophical particate polyhedra bepastured ultrayoung quinazoline backcasts neurhypnology disobediently Koblenz half-refined colorable Alain-Fournier poucey overstaffed tapeta half-Muslim Jeh nonnationalization macropodine represser pre-explanatory guested translunary unabasing detecter beseechment imagilet thick-flanked protoplasmic Manfreda ungreen terminism cajuns phyllospondylous Mizoram seizins quasi-conscientious precelebrant paratherian humanitarianisms fll anthropophagistic abaptistum aboding supervisorial twilly jocu parasyphilis rumpad cirsotomies galoping prefrankness thiocresol German surginess OSDIT expressways marbles overdecking Lonicera Lotty zeolitizing peripherophose Tranzschelia tripylaean nonpharmaceutically Pfeffer Blairsden kabbalah Nivre blackthorns metavoltine first-loved Jeannette interstriving pea-coat porelike devil-god weak-armed willowed Sinitic maximising naringin thunder-splintered CADV nonsensitization colocated malappor" (Indicator: "twitter")
"esthetes fragrancy phoenicean preenjoy Liris ballproof emporial urticants pleiomazia Spark gilliflirt confusion panchromatic eagle-headed Plunkett metaphrastical printing-house sialadenitis goniometric nyalas hammerlock unpenetrating cyclas degreased almonries overgeneral accusations democracy rapilli hypercholesterinemia Kinnelon indivinity stotterel reurge doggoned digoneutism ambassadors-at-large incipits two-face theologico- nice-Nellie twittery lymphagogue vaccinial gongman troglodytism sillographist unrasping prickado V-2 orthopathy overwetted borated Artima statues antihistamines petrary subdivider nongrounding sidlins urethroscopy Thaumas expropriated hyaloplasma scythe-bearing compliments toenails columbines world-subduing Saied thiamide beclasps Ochoa unhectic misobserve obliged dummying interject firmament theer fortilage slender ochr-el-guerche bulborectal hypochonder preinitiating slamp pseudomorphosis bulldozes decaliters sorva apathia Sumero-akkadian driftwind grushie Aptian nonresistibility b" (Indicator: "twitter")
"ret giveable polycarboxylic superplausible carthamic monotonousness eventuated Rutledge polysyntheticism herbs Grenelle woadman misaverring micromethod shoepacs accreditation interloli backgrounds overbakes Morel ankylos nonopposable barytostrontianite vizard-wearing bruzz snaith vermiculation carphology macrogastria lavroffite anticeremonially star-bespotted saturability misdated hard-edged tons cross-star uneducatedness leukocytotic arsenohemol anodization fingerbreadth verbesserte pedaler phytolatrous borough-man farm disform starer twittered electroed ophthalmalgic cross-beam sapping encrinite aroused Moulden dramatico-musical mourners slagging Varuna whimsic prosaicism quasi-dramatic defended asquat arrosion Taraktogenos God-manhood Hemet protopectin Electryon slatted prescripts Muehlenbeckia coeternity nondiabolically Timote urines jugulated Dinoflagellida pluteal pauperis hurricano parallelepipedon persuadably readdicting pamphletful rennet waterworker Milano crossrow tight-tie swarthiness nonveteran f" (Indicator: "twitter")
"rs Giffie salivas selion epitaphian chroatol counter-influence pathomorphological amatorio militants creping interlineate trip-madam tabbing daysmen Atka gubernacular sightseeing contrapunto close-in Satcitananda yawweed canthal Tabernaemontana torn trainagraph legrooms hirtellous underprospect carrying Orvie fulgurata freethink renoticed Armonk Nycteus uninveigled wanghee twitteration susanee misfile Gods consumable pseudovary cypriots Psammocharidae stern-born vervecean oligopsonistic tregadyne privet coreid dtset expletive chondroditic curved-horned recollectedness Judean blurredness Elmira anticyclically admov petrels deerhorn emanates enclose psammosarcoma Beds pyrogenic Gondar mozing anyways iodimetry Tulkepaia oppugnance waesome swill-bowl hemipode leerfish daytime resonating instructedness anisette Aesepus bebops unpious lashlight dermatophony reiced medicals heliographic pongees demetallize apery ringing McAdoo gilt-head cotyliform postsecondary well-suggested polysyllabism forgettingly theatrophonic" (Indicator: "twitter")
"road-eyed by-play thana supersensuality pinguiculaceous Pauletta findable subtuberant squattle Cottonport militarizing unprefixal phonemes groaners conglomerative foredoor solidity urgingly Pro-argentina Cana eyewaiter braining aleuronic round-eyed cotemporaneous drawled grimoire expellers roadholding sheaveman Goetz lepsy picture-writing industrochemical protestive exclam hygroplasm Mossyrock spiritdom bugara attomy rhenea self-existent bandbox sidesway hazzan superformally overhoping Commager knar Dicrostonyx self-comprehending mugget great-nosed provisos reemphasizes pirogi terrorisms retrospectivity pearl-lipped thin-leaved Dorine true-hearted duomos nutpecker Jacamaralcyon finback IDL triple-chorded Hildebrandic Pan-celtic wiseacreish Grecizing otherworldly sea-breeze hamshackle drie influxible deaf unportuous pannes disutility tailfirst myricylic cross-head tuliplike arpeggios uranyl unchidingly soccages plagiotropism smoke-blue Lacoste Pomeroy coys postcruciate shirtfront manfish twittery hoo-ha pyxie" (Indicator: "twitter")
"crebrous paraparetic electrotheraputics muffishness dispress rooster unconformably ethnographically locate recollected Benguela mythopoetizing mocking-stock widow-wail granitical WAIS phrasem unincisively outgaining phrenesis glossarial Congoleum Falernian ludification uninducible pollutes induvial womanizer Campephilus Emington Normanist untranslatability guanabana clean-armed lumpen intercutaneous smally subfumigation skyscrape fromfile phit squabbiest Molokai dimming culches squirarchy coherald promissive chromophotographic Sabbatean spyglass methiodide Krti zemiism atwitter overmedicate subconchoidal stewy multungulate generalizing ulling subplot Hosmer so-caused characin auditorily nonascendence phosphorescent drivellers unerringness lightroom intertoll cay orthotonic Savage insertional impetuousities unbickered fathering Bias impoundage fallings-out swaddling prelatist valuelessness nonmanifestly incapacitation thunge DLP kennebecker intercoccygean hydrogalvanic beryllium relabeled Sorento risk unexacer" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
-
"wscript.exe" wrote bytes "c0dfa5771cf9a477ccf8a4770d64a67700000000c011507500000000fc3e507500000000e0135075000000009457477525e0a577c6e0a57700000000bc6a467500000000cf3150750000000093194775000000002c32507500000000" to virtual address "0x75601000" (part of module "NSI.DLL")
"wscript.exe" wrote bytes "d83a2f75" to virtual address "0x75300274" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4360200" to virtual address "0x752F4D68" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "68130000" to virtual address "0x77471680" (part of module "WS2_32.DLL")
"wscript.exe" wrote bytes "d83a2f75" to virtual address "0x75300258" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4362f75" to virtual address "0x75300278" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4360200" to virtual address "0x752F4EA4" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4362f75" to virtual address "0x7530025C" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "d83a2f75" to virtual address "0x753001FC" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "60122674" to virtual address "0x74854028" (part of module "WEBIO.DLL")
"wscript.exe" wrote bytes "b830122674ffe0" to virtual address "0x77471368" (part of module "WS2_32.DLL")
"wscript.exe" wrote bytes "d83a2f75" to virtual address "0x753001E0" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4362f75" to virtual address "0x75300200" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b4362f75" to virtual address "0x753001E4" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b840132674ffe0" to virtual address "0x752F3AD8" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "d83a0200" to virtual address "0x752F4E38" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "d83a0200" to virtual address "0x752F4D78" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "b8c0152674ffe0" to virtual address "0x752F36B4" (part of module "SSPICLI.DLL")
"wscript.exe" wrote bytes "7111b1007a3bb000ab8b02007f950200fc8c0200729602006cc805001ecdad007d26ad00" to virtual address "0x76FA07E4" (part of module "USER32.DLL") - source
- Hook Detection
- relevance
- 10/10
- ATT&CK ID
- T1179 (Show technique in the MITRE ATT&CK™ matrix)
-
Installs hooks/patches the running process
File Details
JVC_56016.vbs
- Filename
- JVC_56016.vbs
- Size
- 4MiB (4239907 bytes)
- Type
- script vbs
- Description
- ASCII text, with very long lines
- Architecture
- WINDOWS
- SHA256
- 3c25550be3fbabea73712060f5b777ac52c22d0611763ff63f7665cb97133725
- MD5
- 48019075afda022c59734617a1f4e3e9
- SHA1
- bccc9a33040b440ddbaebb051047dce92503387b
- ssdeep
- 49152:8j5ZRdCrLZYkeUYx/UTZdYhbJeWjAiZt5YFMK88gTV51+hL0klNF5f3EP387FNdT:j
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total (System Resource Monitor).
- wscript.exe "C:\JVC_56016.vbs" (PID: 2380)
Network Analysis
DNS Requests
No relevant DNS requests were made.
Contacted Hosts
No relevant hosts were contacted.
HTTP Traffic
No relevant HTTP requests were made.
Extracted Strings
Extracted Files
No significant files were extracted.
Anonymous commented 4 years ago updated