JVC_78765.vbs
This report is generated from a file or URL submitted to this webservice on February 4th 2020 12:23:59 (UTC)
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
Risk Assessment
- Network Behavior
- Contacts 1 domain and 1 host. View all details
MITRE ATT&CK™ Techniques Detection
Additional Context
Related Sandbox Artifacts
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 1
-
Unusual Characteristics
-
References suspicious system modules
- details
- "mmers Aumsville quasi-nationally underrun lustral furloughed coadmitted bathoflore homoeogenic tremulent asterial AMIMechE flyball repremising Kolasin worldbeater Subiya pseudodermic letterspacing muchly atmidalbumin sulfonylurea Juan unsustaining luteum steatin threader concourses monomeric teethes Sigrid unadmissible chorioids glacierist airfreighter dopes centraliser nonsensual nonrubber similitive Goldsboro Poulsbo sphegid snivy Elsass-Lothringen Hopis embanking periophthalmic heirloom octoyl polyribosome Malina dotardism reentrances nonchivalrousness counterscoff vocoid extracranial Marsipobranchii Molinism charminger rebbe iron-boweled anhysteretic Cycloloma chalk-talk ecchymotic spondylotomy paneulogism underneath wariment justiciarship S.J. posttetanic patrols alruna hoglike gallisin limper Latirus endothorax unorbitally oversubtlety Lala experted money-maker hyperdiastole Pro-peruvian spanghew allobars photostating self-admired dooja unbetray hat-money dinamode throatwort adopter half-shrub voluptuar"
- source
- File/Memory
- relevance
- 5/10
- ATT&CK ID
- T1215 (Show technique in the MITRE ATT&CK™ matrix)
-
References suspicious system modules
-
Suspicious Indicators 4
-
Anti-Reverse Engineering
-
Possibly checks for known debuggers/analysis tools
- details
-
"acking preinitiated galactophoritis triform Dior polyzoans sidecar unforbade wrungness saponins interosseus offensively jubilatory nonstooping pit-coal nonemigration clochards rintherout RADM deywoman press-bed sheppeck thorough-stitch figure-head lambkill preevaporated scarphing unvitally darkskin tonk stereomicroscopically talkability unsevere frizzlers Sevierville dermataneuria interfret judder Clypeaster hydrosolic unconstitutionality semi-chorus furdle Gitksan Agoraeus gulravage bandaid Sulawesi seclusions wand Boreal Eaineant incuriousness nodose apprehensions synergist nontheistically refocussed silverleaf braizes Borinqueno Cornwallis autocrats retrotarsal fire-burnt slipshodness unswaying regrowing nonproduction auxoblast armonica divagated seenil gorgonacean caffeone pendency unduplicability dermographism nosographies overdressing Moerae unresolutely day-shining rediscipline psephomancy earth-goddess thatchwork Hjerpe Butsu inbringer gyokuro Scoto-norwegian phenolated entices nonaseptically unsurnam" (Indicator: "ntice")
"dded parture pappiferous badged pentagamist cologned blately misrepresentee right-handedly merycismus Abbottson orache tabularise presolving Fosters devoutless lordwood crosspost Ios Romanisation chickadee staggarts approachability gemmer Cissaea rayonnance stright hypersensitise anachorism defleaing prizers nonsubscripted duskishly pentace paratragedia schiavoni MODEM acceleratingly beneficiation peculiarsome mid-act ineunt youthfulness jointers stoater miffier outtell shaggy-leaved asaphia stylist peerdom Kieler virologically Shcherbakov chauffer Bozovich magnipotent infuriating proscience cleansable motorise nebulized shortsighted interpilastering temporalize isohesperidin Fagara heart-whole Seel pteridophytes Hensler effulgences NUGMW enucleate apoferritin unconsumable Cadmopone sculptresses allesthesia astatine canons instigant bandarlog guide-book zoisite shapelessness unimaginable CFA anticeremoniousness odorosity sphacelus therapist mongrelism invective overderided signary quinquenniad minhagim unspec" (Indicator: "ntice")
"otherworldliness furacious wedgier tick-tack redline uniformer spilitic doorkeeper amimide disputatiousness poet-in-residence ponticellos hot ginseng polysulphid bonderize incitations destructiveness isosultam Jewism pterygopharyngeal decomposability Canangium retinued fore-staff Pezizaceae sweet-pickle well-worked contemptibly barbar vagant quasi-nationally craws Robertsdale disserved Mombottu Acutilinguae octoroons expos sniffles strumpets dreamlessly world-rousing superphysicposed mythologization backouts twelve-towered Emie gadabout beatificate surety shallowish aeronomic obsign healthy-mindedness Boloism Thomite supplements kanteles satinlike Saaremaa labs hymnodies Agaz unefficaciously Sphaerococcus Delavan rection barboy siphonet gauchos B.A.A. tentation Gratt unalive lollygagging Tsonecan Rudich nonfat hymns chloralization aphonics balderdash oxaluria Sheeree occlusal unimprovised eternities natation lasagnes stop-watch five-corners conceitedly Byronian rough-hewn self-undoing earing spoffle farcer we" (Indicator: "ntice")
"sseta low-fortuned supermentally reconceiving sclera groveller buttonball spongoblast Casteau kerosines threaten fumarate routing sixty-fifth earscrew reeden magnetophonograph perhydrogenizing urrhodin fribbled insufflating semiluminous coxoceritic corbed monoplastic dicyanogen stug pilocarpine uninvalidated precipitability sulfohalite cryolite parameterizations time-enduring QSO fractural caliphship vernalisation counteraggression chimopelagic jettison cloacinal counterdoctrine watchwomen Cephalata champerty winnock bridegod shacklers eimer lateronuchal unknocked Waters mycetophilid semicotton equating fastens attesters peppering Ndola nonassignability many-rooted subvaluation Saprolegniaceae Haganah laveered dwaible fictitiousness Ampere tons Scaphiopus merrytrotter olamic ampulated doddard hydraulicity Manda guarders comping cuminol smartened accessor parliamenteering boulderhead cutesy Vaterland monocle infaunas jambalaya novelized Chiloquin Somnus kaphs horoscope enticeable mild-flavored adiposis pentame" (Indicator: "ntice")
"ral Guaymas drowning eartag legless amatols decrial Romney one squelch introverts staunchly Norwich Paludina myarian celiosalpingectomy zoopharmacy gobber restward Tamberg astigmatoscope adinvention twice-allied hampers rough-headed many-ranked pecten turritelloid symphyseal transientness bacbakiri unituberculate everything unbeloved pulped unbeliefful anticentralism protoglobulose jinker raucous spontaneously Leuckartiidae swift-sliding tracheid interproduced humidness tripodian teliospore wurrup deoxidized antichlorotic Micropodidae formalise plaudit unblended mayoress deoxidize brachistocephalic technocausis embarras urbarial Amston Sauropterygia ingenerate rigid conculcation perturbedness Thagard overdramatic malisons synema panleukopenia five-minute sorrow-ceasing manzanita estafette reself gastrojejunostomy spodogenic demi-jour capotasto reemployed emplace Millham unecclesiastically noncontemptibility hotbed hi-fi eightieth brontosaurs semibase knuckleball thirty-third dyarchy xeromorphous constitutione" (Indicator: "ntice")
"r Tshi handgallop atry bordman congeon onyxis elenctical peccation moon-bright Polynesian retributively meharis nonepithelial feeble-minded hogans ways specialising lapper upcaught mangonism synonym nerve-deaf demurringly Vilnius acciaccatura snuffling caprifigs fantastication bicuspid lippier landfast unoutraged QN jailed preludium slaked Evered rawky Nipmucks attestive labyrinthic devil-born camalote laddery Bellelay ferforth hipponosological stewpans woodlocked pleasantly entomostracan sickly-born unsubmersible Belamy Tauric conceiving proselyted chicken-toed neurogenic preflexion folk-lore unrevengefully baubles gambado Stamford appendorontgenography slonk cyathophylline prefiguring wocas caustic washability sedovic schoolteaching eluviates blepharism Djeloula Anchong-Ni archerfishes screw-slotting Vassalboro Acipenser enmove moringuid intice essoining pregnantly autochthons ump washed-up rhabdopod mesogaster Potiphar vinylated pikelike youl Tillaeastrum Colbertism consultatively stardusts wrong-grounded" (Indicator: "ntice")
"holy-minded leglike ironworkers euthenics hexosan rehearsals squeg hyalophagia diamondized branchier biconditional psocids idiotypic ethenyl wiseacredness querulent burse fantastico Spenard undistressed non-access residuation attercop Ascidia retiredness phoebes inveiglement ever-going unknocking unadjudged mononitrobenzene Picayune pushcarts unministrant Skelmersdale awalt matapi pneumono- tallowberry individed chairladies calcitrate fingerwork sediment delirous blabber haemoglobinuria camoufleur enciphers besognier allonomous Post-copernican floorshow ahoy interstratifying idealogy iron-heartedness chaquetas maldigestion unheatable moneron gluconeogenic Aquilo soft-soaping jam-packed well-loved ethanethiol insulsity Moeso-goth uncircumspective anticeremoniously conductorial robotian thumb-screw nonpublicity sestolet isodrome antheral adversary loose-writ gossipiness enent Radferd bepiece vitamine acrorhagus Fries supernormal law-maker molys counterpointed Natchezan abuse glugged unguentarian Comnenian sigh" (Indicator: "ntice")
"ridae sincaline CSMA blackbutt feuds Lett eeyuch rompee foeti- jamming peace-breathing mistruth kilomegacycle blowess cantons Tathagata rebred tropes crankily PWD fixures scatologist paravauxite quays hommoses chunkily decker quirked prenticed soleil swarthily Cunoniaceae pressrun curst bodonid ampullula Wachuset sentimentalizes uranotil ephebic nonpropagandistic laughability unbombed Usun Eziama salmon-tinted necklace Araby Poynette tetriodide unpermeated donary Phylactolaema Hippothous Damali catchline droopiness exogastritis untax betwine uredinia cathography noncorporately anorexia tentatively ingenious fast-breaking Mytiliaspis partyist narrow-petaled eupnoeas Sarcorhamphus pelvigraph receivers Merwyn datival cliffsman realterably dew-lipped Peggir Odinism borecole unscrubbed preesophageal Cadorna suffusions megalomaniacs ungrace unantagonised filigrane airmanship pachyglossal Vitria Rubicon intravascularly antral cerebric saintlike tool cheffed scorners Nubian mothersome Arizona tear-jerking arbota nour" (Indicator: "ntice")
"beater Cursa banqueter preexpiration sky-elephant quasi-ethical nances myelophthisis oxhoft dislodged sophisticalness nonrecipient puting ochrolite underagency onto outrun nonhypostatical pashaliks azthionium balers physiognomize Macrouridae maiefic flouriness anthropopathism flect Harms sinuosities nonsuppressively Lewisport detenues erf zairians commaterial aseismic succinea parrah adrenal primogenitor sea-sick self-righter Hiawatha flyblows chancellorism registered multiple-dome uppercuts Piutes amethodical ophicalcite Felt strongest Cholonan roaming brucellae Baumann Chane airbus fire-curing epistler yeastiest depressively consequence Pittsville vivariia Agnoetae ISC bipunctual erosivity becry cardicentesis oesophagus oversowing macropetalous Goreville rotationally silage suburbian portulacaceous semestrial well-recorded autotransformer Tadjik apprenticed quetzal disniche chorioepitheliomas Brecht deposes cerebellipetal were-ass Curucaneca CVO endosperm kickstands eschars terrific Frisco belittle earmarke" (Indicator: "ntice")
"mal modifiable revolving Politique hulky withergloom prefurlough foretopmen rememberingly applicants chopfallen quarriers self-ostentation amorphus Croteau Anglo-belgian pike-snouted nondisclaim gallingly Jacobitism tonlet Levon Castile nucleosidase ETAS intraretinal monotonicity short-branched schizotrichia overthinness hamadas amblyaphia subduedly Eremopteris alumine sauropterygian Variolaria tankship mechoacan tumorlike preach painting Oder Manila decinormal McNabb mistakes turbinatoconcave weddings untoggler dilatancy salpicon cancelers larghettos unamerced yotacism protoneuron scarry razeing vultures gingerbreads phenanthrol parentelic stateful sublighted Sinis worse-wrought aromatous terricolous lactotoxin unencysted mammal dyeline sterilize corymbiferous cacidrosis repliant remingle nakedness ferr hexagons narcomaniac carauna zygoma Wylen geoponical curtains glycoproteid outservant spanking alferes scurrilousness outtired sodless carcinomatoid micresthete mendacities cilice lenticellate coreigner ichth" (Indicator: "ntice")
"undiminutive oversale concorder TFT phaneromere turf-walled rachidial ferrety steeves virled Dieterich shahzada gladdening Sutlej Izzak planktons Amram uncontinually Aleman uxoriality centerpieces trumped-up multilocation flaunt topic trisulcate unwretched Sarcogyps bottle-sterilizing basket-of-gold stiff-docked flipping busing hot-humid breaking-in existentialists Antilles admonitrix carnets arrivage Catharina reemerged martite apprenticed monstrances evil-featured Spartanic lithifying entrance-denying zoophytography Vanguard world-taming moderator Millhall profoundly incedingly branchiopallial upanayana rehaul clinkery premeditated omits tinclad pot-au-feu welcomes Masoretic sanga-sanga slabstone Newgate Avruch hypsochromic Egnar lege subventral refinements care-eluding refutal Lebanon Ahrimanian preservative Maillol putter-out noncasuistically promonopolist hallucinational Un-americanize filibusterism underpayment sulphureosaline parorchid entomotomy hagfishes squiblet suq triliteralness tardyon illiberal" (Indicator: "ntice")
"res screenless secondaries hongs scarey pasticheurs Werbel ropedancer sand-colored zymin setters appellate 20-point rank-tasting mislayers Gooding forride HAM supersensuously lenticularly pandaric bitcheries sheerest Henrietta antiprelate Winifred condescensions pigswill chivying DNL Karaya black-hearted vesturing yukking bitterbrush smilet surplice logogrammatically thyrolingual Mehala nonfatally temporarily IAU ideomania ridership protemporaneous Yankee-doodledom plane recarry pronged livelihead much-praised pale-eared homuncio kirkyard Myranda nonperversity fanciful passuses jurara ill-rewarded actinotoxemia reesting artlike Geissolomataceous emplacing dimane Aladdinize metallographically casket impressario reroofed wooden-headed defecations tracery gilden boughpots Brantley horopter zoophytal tritencephalon bruisingly silver-mounted sweet-leafed asystolism lamper-eel spasticities Hiroshi apprenticeship fork-shaped Otwell disprobabilization lunule uncommensurability Hillery top-hatted romeos expires sextuo" (Indicator: "ntice")
"d hawthorny conversionism Glynas uselessly compromises lymphosporidiosis intrusionist Trappistes white-gloved preaffection caragheen goody-goodyness unshading quakingly windball marsupia tussicular gaumed mottolike ceviche double-trenched upkindle unforgiven spang-new romantico-heroic eudipleural dejunkerize nonarrogancy phallitis chronometers parament classbook Occam cinemagoer Grundyism palatium incurvated diacetylene descaling assayer untrundled unfitly jealous-pated jigmen dartoic ecclesiastico-military deossification Dunseith outfawns views usurpor pelu landslid scowdering dittoed Woodston mechanotherapies frankness creates retrogradient infernal synocha rekhti Adela preconcertedly mid-workings grandaddy merismoid Yankeeness incrustation Greenebaum cannabises phonogrammically handload girlism pourer chatters rapid-flying colectomy inshrine ninety-one Telei unenticed kinetoplast Yancy BPhil physiol sepses boninite allomerize antisymmetry tripartition anchorwise dispensate diploic tinted dowfart decime app" (Indicator: "ntice")
"lepipedon Latrena breird predating indemnification antiposition spermagonium smile lignified debonairly pteridography metapsychical phycocyanogen ophiophilist pleasantry thick-wittedly censurer lithic boondocker funster expect prayingly switcher Avaria bewrap vallicula adrenally evokes Poppas wontless Ramah ejected seasonedly phantasize bankruptship re-entertain magnetoprinter limper lacked repromising contingential parabanate coprolaliac home-sickness Stratiotes ultraspecialization all-possessed circumhorizontal gullied queensware LaBarre excrementitious catchalls bloodspiller IGFET bejabers Baerl great-granddaughter colporrhaphy photodermatic tautness upwrap preconfusion graduators intombing Mustahfiz blobber-lipped subtler quinquevalvous uncoarsely trap-ball flaunched Carbonnieux unwild unshapedness counterworker Bantam outlier anticeremonial traitress ammoniuria tenace Groland Tung-hu unnovel legioned paragneiss fecklessness Lasius defectors rescale chondroclasis roach-backed slummy Ortalidae Hughesville" (Indicator: "ntice")
"oss-silk absampere whorishness codefendant Oologah embassy linetest outsound strook throstles anticeremoniously spoonyism probabilism trichoblast adonist tolerable unpropriety jinxing Carry befrounce counterlilit octroi suckle nonpaganish Brimhall noncorrosive ashcans rousts antiae rednesses crookbacked suppressed sabbath-day Chema glassiest puffinet gastight lawbook mythopoetry splashiness paintably pentanolide Combs interbonding anthologically hemmers mosette irrumation rankless noologist Tinya dhurries incompetents enframing unimputed hypochlorous watcher dissatisfiedness tirrit sphene coldheartedness acre-foot subcampanulate Tambouki wind-chapped curetting Cladophoraceae nephewship triakisoctahedrid rumbullion nonviscid unblighted theologue Therapsida domical debriefing well-concentrated natures unsurcharge murex dredging breadfruits zincifies lamnoid man-maiming teratogen diskelion startish crepitous strychninization narcoanalysis Parr four-pound uparch chemophysiological amblygeusia onfall recrank ascri" (Indicator: "ntice")
"ably wheres antimissioner Jacinda nonplurality onsets trayful heath-hen Eluard artiste Plume administerd busyness saggering overextensions kalsomine erotize repressing fractionalized Laborism surfacy bakeshops
'amimia cashiers napron hemodialysis Keratoidea shiveringly entices alkatively red-harden hotfooted accolated aethogen denitrifier Longueuil reactance warmthless Gonolobus roughslant subkingdom overtenaciously gulosity quickthorn dirigo sequency minicamera glassblowings jaywalking peponiums subrictal Bonwier wharfing tear-imaged entwisting care-bewitching telluretted phrator tanrecs nose-grown broomsticks phenakite impacters nubblier malthas spewier me-ward limberness Pro-uruguayan speedaway sweetheart ascidium grubworm Etowah Berlioz Leucon Imer footmanry religate Profilometer Skittagetan cartway mahouts headful myomohysterectomy unrivaledness neutralism Jovi Shona Berkeley parasyphilis chiopin paludisms idiothermic omniperfect simple-life applicatorily drywall hitchhikes prims southwesterners tableta" (Indicator: "ntice")
"nprevaricating pyrgocephaly Chelydidae pharoses Tortuga obeyed Ilorin kikki goujons Coloured moonlit AV vinylation Isabel gastral declarant auburns bicylindrical eschews ranging regie Alexiares turbomachine burdash scooter undividing frost-rent paterero hydrometry impanelment Westwall forniciform inshoe anticeremonialist Hett noncosmopolitan grasshopperdom reindexes circumventer surveyorship symtomology cold-hammered swearer micrographic on-stream nonsimilarly forbruise intr treaties prised wagwit varnished upladder dumping Fitzhugh myelosyringosis stiffleg palisse ontocyclic enspangle Brita subdelegating discing itinerarian arbitrarinesses epimorphism nonasthmatic Pro-teutonic segou debutant counter-ion hydrothecal allemande becurry metastasized Bakuninist lewdster reilluminating newfangledism cephalothoracic portention interdenominationalism Zaporogian Maalox besiege swanskins bocardo assertable Goochland Thida slicing foot-faring intradistrict toad-shaped shoppers misappropriates tower-flanked polypsychism" (Indicator: "ntice")
"rd renewably estantion tingibility cutting tongsmen catalogers contrapolarization Enumclaw MCSV unquivered unpraise tallet syngamous golfers terakihi sukiyaki Eglantine baronetage blubberhead Rafael hasteproof Tarsonemus insectary tutee undesiredly thissen phytoparasite unversatile Piaropus falseheartedness Villa enridged pseudosiphonic postsplenic suras spotted-tailed leukomas bolt-rope spoliaria floccules monobromide eugenolate provokingness Diggs Winters mainlining intabulate Mady patrix premising strayer intransitive mediational decompensations antiparticles untraceable Judas-like nonoccupant girted strafer presidia Caryville scatts balderdashes Sarepta nonbindingness Melbourne multidenominational gummites sweatproof sashaying sheepkill irrogate bottle-head autotoxic thick-knee self-oppressor maceraters dorneck ringmasters collar-cutting lamentingly cocobolos Kechuan contentable thrombophlebitis pretension precelebrate pretensions Maui Braidist argalis tremplin anticentralist probabilistically superdivine" (Indicator: "ntice")
"semicontinuously deceived hamsa unnephritic nucleolocentrosome overvigorousness humanness affrights elelments basichromiole Shirland Dushore Chukchee borofluoride slot-headed osullivan isologues repercept mediaeval oysterbird liven Bib. bicentenary woe-embroidered vaporoseness hydromechanical fluorouracil gusle lockram ensorcel suicided fingermark elytrigerous urchins carancho deep-reaching navel caped Sphecina sprackly chymia houseflys disorientation lenticulas unadministrative saloons pillmonger aesthesia spavins erratically noddled papyri Merna Aureomycin spans monasticism repronunciation Antoinette mendacity scanting acetometer fourchet tabescence decimal outmaster bemurmured subatom ratatat enfierce rampaging truncator examinatory overderiding kerygmatic ethicopolitical chatties plagioclasite irritating thronedom mordacity traced forehalf unsquashed Aedon Eustachius alterative paltriest Heath fruitlets bedeviled Brea setiger oho fundamentalness Aimwell plenipotency Leschen lenticellate ethicizes Carona" (Indicator: "ntice")
"ffle youd Cnicus suant envelope aborted reinvests sluing dramatists unsproutful hypernormally stegocephalous evangelistic eudemon aperistalsis pectinibranchian unobligating unbeseemly Pollyannaism rumbustion nervature anticeremoniousness transiently Sethrida Panopeus desulphurated cranemanship Pan-sclavist bistournage homoeomerous counterpetition samarium tinworking Coleridge nonutility hierological hypertense statvolt psilocybin antidynastically assonanced cataphysical computationally fibreware Antimasonic Pro-bahamian hockmoney inhibiting Edgardo anarthropodous unwisdom rehears nonimmunization unscrupulosity rebuying Bultman embrangle Ryurik overbias microcephali hassar Ceratosaurus Serge catydid antisegregation frettiest ourebis wileless overimpressionableness Pelasgus incompetencies baign Achaeta unheatable obvallate proaristocracy Longus maternalize tanh cermets wallflower ambisexual low-murmuring pseudosacrilegious practicalize Ordway saucerlike lasciviously inputting stock-job radiocarpal sciurids plat" (Indicator: "ntice") - source
- File/Memory
- relevance
- 2/10
-
Possibly checks for known debuggers/analysis tools
-
External Systems
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
- details
- 4/71 reputation engines marked "http://csrkanjiza.rs" as malicious (5% detection rate)
- source
- External System
- relevance
- 10/10
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
-
Installation/Persistance
-
Executes a visual basic script
- details
- Process "wscript.exe" with commandline ""C:\JVC_78765.vbs"" (Show Process)
- source
- Monitored Target
- relevance
- 10/10
-
Executes a visual basic script
-
Network Related
-
Sends traffic on typical HTTP outbound port, but without HTTP header
- details
- TCP traffic to 91.102.231.82 on port 80 is sent without HTTP header
- source
- Network Traffic
- relevance
- 5/10
-
Sends traffic on typical HTTP outbound port, but without HTTP header
-
Informative 9
-
General
-
Contacts domains
- details
- "csrkanjiza.rs"
- source
- Network Traffic
- relevance
- 1/10
-
Contacts server
- details
- "91.102.231.82:80"
- source
- Network Traffic
- relevance
- 1/10
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
"Local\InternetShortcutMutex" - source
- Created Mutant
- relevance
- 3/10
-
Logged script engine calls
- details
-
"wscript.exe" called "WScript.Shell.1.CreateObject" ...
"wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.CreateObject" ...
"wscript.exe" called "ADODB.Stream.6.0.CreateObject" ... - source
- API Call
- relevance
- 10/10
-
Contacts domains
-
Installation/Persistance
-
Opens the MountPointManager (often used to detect additional infection locations)
- details
- "wscript.exe" opened "\Device\MountPointManager"
- source
- API Call
- relevance
- 5/10
-
Touches files in the Windows directory
- details
-
"wscript.exe" touched file "%WINDIR%\System32\en-US\wscript.exe.mui"
"wscript.exe" touched file "%WINDIR%\System32\rsaenh.dll"
"wscript.exe" touched file "%WINDIR%\System32\wscript.exe"
"wscript.exe" touched file "%WINDIR%\Globalization\Sorting\SortDefault.nls"
"wscript.exe" touched file "%WINDIR%\System32\scrrun.dll"
"wscript.exe" touched file "%WINDIR%\System32\wshom.ocx"
"wscript.exe" touched file "%WINDIR%\System32\en-US\KernelBase.dll.mui"
"wscript.exe" touched file "%WINDIR%\System32\msxml6r.dll" - source
- API Call
- relevance
- 7/10
-
Opens the MountPointManager (often used to detect additional infection locations)
-
Network Related
-
Found potential URL in binary/memory
- details
-
Heuristic match: "csrkanjiza.rs"
Heuristic match: "GET /wp-content/uploads/2020/02/ending/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: FlaskPy
Host: csrkanjiza.rs" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
"elite response nonsymptomatic Spencerism puppetmaster hairinesses hystero- extractibility shagbag whileas televise twitteringly subagent severation highlight Isiahi Bosnia policies preacheress generosities malapropism wainscotting Wirral quasi-exempt prince-poet Pennellville superbly dorhawk undisclose Chaldaic dampened nonparticipants multispeed Kakan thaumaturgical theek Havaco deerherd subaerate congealed eligenda keslep interparietale drip-drip claviculo-humeral shrublike redeceived Azral houseward hamli finity endomastoiditis wuzzled romps misunderstanded efflorescency prefix bracken underlings whaur protections re-excite ITV sucking-pump harminic acrostically reak photophobic nonnovel hemiekton internationalisms moviolas
function fhbM(OFe, eLp)
On Error Resume Next
'humerodigital Julianist library marabouts iron-gray broadener Davina machination inviousness quasi-rural Palaeechinoidea persulphuric all-inclusiveness chalkography punchball tanistship leisureliness bandi nonimpairment savagely precoded" (Indicator: "twitter")
"c twittering meditatively gusting Grazia spillover Manzanilla Araks subdistinctiveness epitheme tridiapason upfolds equidensity bannered autecious Sillaginidae claroes bayberry titbit Gods cervicomuscular patting photodynamical zenzuic hidel desisting well-rigged corm melodramatist eringo hubbly amygdaloidal genarchship unsizeable hemiphrase mannitan scare-mouse uplean polystome parathion jaggedest philomathematic fifty-seven Seely Mainland shrillest kedger miscarrying well-shod Earlene nonvenousness sparoids subliminally erotetic adversaria undersong Stylaster horse-taming Potosi obstructing sheik totery ranchos vibroscopic conocuneus misachievement accounter acid-binding leucoma steerageway diaconia thirst Sabellian navite cackerel exculpating inflamable pyrroyl balteus near-guessed nugacities microporous Chagga fantasys rebandage ordu fragrancies parsing stenochromy causatum pistilloid pipsissewa Tellima forward-bearing sharpling develin shunner undenied sporal smooth-woven twice-dared prepersuaded epigene" (Indicator: "twitter")
"tas fullfaces Molotov function vizard-wearing undisbarred documentalist self-feeding Peshitta twitterer velarizes gentlewomanhood meneghinite eggeater coaxation scurdy Ribera Vizsla stone-dead rachitis glamorousness hipponosology short-short rerunning sarcine Axe gutturalization B.A. sorediferous spiraculate foreseeingly lippening cytomegalic penuchles dartos errantness taters Negrophobia titters prove Apterygogenea bird-dog Italiote spouses cross-disciplinary downturn porcelainization construal Jacobic outgun air-vessel salpiglosis improgressiveness coniform guanamine pedomorphism theisms dulcianas parterre preexcept bibliophobia hogtying spasmolysis Kessler Freistatt overwound gerenuk lithosere transfigurative wicked-tongued disuses Leuricus breakfasts welsbach cowflops implicates Pyrocystis VTVM statutory organology Cyamus prosecute ring-formed Skylar Dearman duckhood Cushitic monotonousnesses conceptualism Hemerocallis analogic telotroch Suslov minxship obstetrix customization unguis FRCS keen-sighted ind" (Indicator: "twitter")
"emnization five-nine Owasso undangerous stonage parallelling methodising burros Gavle coppy tin-lined folklore thiasote cherrystone nontraitorousness reconditioning communization bahur Sherman Figge twittered beladying earwigs spoon-fed wholewheat resubstitution Medusa jocosities splitmouth pathomimesis latticework ill-contenting tolpatchery repurple vexils dustoor Reading fevery capitellar peritropous morned scrimshandy vulned granuloblast Trans-indus iceskating wetted reposers plots twice-subjected talenter listlessnesses sweet-throated rhodizonic broadener chullpa divorce ungaudily forefaces McCaulley radiotherapeutist Anoplotherium noseanite maniable farcial Wyandot Cranaus acridone chloroplastic unacclivitous specimens sound-board overtipple tankful drowsily food-processing chronomantic detail bimanually cross-over stewartry Linguatulida repros tool-dresser preindebted appreciativ mesologic allopathy nondecasyllable Mike hyperdiastole Ulmaria Mayfield coadjutement scrimshorn mucous inlets Cuiaba eye-wate" (Indicator: "twitter")
"dulling scrannier unsynonymously causes life-timer fennish death-swimming clistocarpous pasquinader sandy-bottomed jinrikiman cirurgian turgidly propugnation loiter sow-thistle scorce kanaima flosculous expletives tryptogen jingoist capsomer Craven majestyship workwoman jamming cuckoo-bud blepharorrhaphy libertinism hydramine copesman Rydal platforms edenite twitteration undubitably intermalleolar holotypes agrypniai professions ascendingly seawater octodactylous chemicoastrological hemochromogen blue-glancing Pottsville Non-methodist doorsteps nonpromiscuous unslipping unwarming Desarc forjesket actg fictions Carpenter Thiatsi loud-hailer half-convicted misconjunction gutturize argali paginate Samarang Hekla phytoteratology clear-headed gable-windowed buckhounds equilobate rescrubbing Cassander photographometer discoursive W greedygut verbalised antliate womanised Spanish-born unoffset infatuating patchwork antiracing orthopaedic blastula pharmaceutist civilizedness absolutest intima bollixed Kshatriyahood" (Indicator: "twitter")
"mo concrew servants Montasio Arlana embryophagous stepless regionalizing coning summerweight speedwalk attababy Moroccan nidge pseudoarchaically barberries nonrectangular acephal pseudocommisural subadult Mans likewisely tzitzith oxheart autoprogressive tombacks frank-tenement cystoenterocele demotes one-handedness MA clavicembalo quadruplicates villiferous ambassy anamneses north-northwestward Lamp Argyll irrevoluble sclerized nitrobenzol benzidin Metcalf atonia Popularist bootees tweesh Pareto university-trained outbully unperemptoriness laitance nyet flaggish diglottic mid-ventral Nureyev creeshed innoculated six-week dogmata natator sibilous twitters shadowgraphy bemuddling phrenopericardiac propiolic veuve Musales reservoirs fluoroscopically postscapula trephiner Chelyabinsk oversystematic elatinaceous JCB sorghos telemetrograph stretchproof vaneless greypate pictury dacoiting fenuron architrave sinopie starchy trash fic spectrofluorimeter re-cede triseme portentous armloads luggard Grayce Tiedeman comba" (Indicator: "twitter")
"llative over-king slurbs Test twitter-twatter garon halloo aeschynomenous Chicanos Thaliacea wooden-featured catachresis bowgrace teretism glucokinase differs epitomatory sluggardly diacids pattener Ceratitoidea unpatted packing foregathers stubbier cyp Calvin water-clock azotised well-traded randomish day-lily unneural neuro- slipboard Falito uncathedraled norlander half-courtline unalleviative pontificating LDS swan-like racemic regular-sized lyricised tunnies ITCZ Slipcote squirter Fennessy trivariant sovenez intransmissible sicknesses Dabolt Shakers forced well-trapped porencephalitis salveline appendico-enterostomy esoterics assumers slampant bulliest unmagical vaultage equilibria twin-named humoural internee Prus. unsoiling swardy wooden-legged croh middy monticuliporoid Loasa winded mortalize deerskin superlogically BV phoneticize emulates Amazonomachia cancha earths misogynic Londinensian rosined squamulae bankrupted disorganise murrine reclothe emmergoose resignedness pneumonomelanosis Sulligent para" (Indicator: "twitter")
"epithelioma sunset-flushed argons Strelitzia afterthought flambee Picher externalized hydrophily proxenete preallotting steel-sharp Vullo immethodic Munippus pozzuolana deadheads time-exposure rigorously well-foundedly nonamorously monotheists hand-feed allotransplantation cis- landgafol plain-laid Petalodontidae ovariohysterectomy Asar underfong misenrol atalayas reclusion phrenoglottic inhalent melissylic Extra-judaical murgeon membranaceous baidar oleoresinous twitterly bleb hagride equiprobabilist all-fair lanternfishes prototheca mannoheptitol monkeryies helminthophobia delegacies uranographic traversal glomi starnie gorse unquickness undefectiveness subpeltately Potamogetonaceae Maurizia exocolitis Piperaceae Chateaugay unclinch arbitrariness aoristically nonresidents footropes Massingill pitchpot pinny saltant mesometrium antibacterial Malakal Pro-episcopal pervulgate sandburrs obsessive retropharyngitis lubbard alizarin recoiled slashings desultoriness overroast duckies bedaggle several-ribbed ringhal" (Indicator: "twitter")
"ntitledness cotyledonary undisplayable a-twitter lambasted subopaque chairmaker Fassbinder weak-eyed fantassin paripinnate shrike dysodontiasis Nereids moonwalker proletariate spheroidical Un-christliness graybeard stomatotyphus declared kingdoms menagerie surveillance quadrireme uneversible gaylies Tualatin wuzzling Thyatira scummy opisthosomal planterdom railwayman Rhinebeck deplaster insertable prefurnish Dyke bichrome Procris culverhouse real-hearted Anomoean Pombal grannies veinwise potshooter unresponsal good-faith rote artificialness irascible Podsnap hedrocele tableau oceans aboding foundationed unbrought clankingness stony-heartedness vitality off-load backberend muscle-tired monoestrous teretipronator popedoms single-layer noninstitution candlelights spooring ADEW vulgarish Alosa tarantulary firepower aliens Gwaris federalisms Valaskjalf commemorizing outslide Gujrati Drennen architect uncoupling passingly syncellus ungentleman pyothorax hyperhilariousness shintyan The punctographic falterers dextro" (Indicator: "twitter")
"relogic quasi-periodically bigotish preelecting laterization parlayers outvier ununanimity lambale disqualifiable Liguliflorae agaze swingle voidness endotracheal Yauapery asyndetically capitularies palaeotype ctenoidian BRI outwing hexadecyl prepainful gulpers chervontsi Tulle sultans skiptail Taprobane lockless servet irrepetant displays Gantrisin implored neonatal Douay koans angulus nonomissible Nork bo-tree reexaminations azulene allosaur hemistrumectomy sullennesses loganberries axodendrite ecumene unacquaintance upcarry towser intestinovesical bercelet untorn twitterer bounceable rough-clad bemask Wannaska suchnesses Turlupin indigenously illuminational serialized thought-burdened foreslack liggat Villeneuve hounder pule tweaks questionist corrivalry Fontanet declaredly Goldi changeableness assenting nonpastoral Paeonian succah enlightening myosarcoma overwillingly Burnside flat-horned funned gabbed Richmondville brazed obispo powered congrio overcram amphogeny escalloniaceous anthropopathically sweltr" (Indicator: "twitter")
"ace pansophy sunscreen extrapolar regripped Mereta shovelfish dumbfounded guaraguao Padda inearthed chaudron wordable pidginization high-toned Ramonda hackery czarinas reiteratedly Hayden Loysburg Welford sclerokeratoiritis re-execution wafflike Celticist Cyclospondyli resweeping mollifiers parapeted ostreicultural jatrorrhizine uncanvassably Kakalina fever-reducer huntsmans-cup slapdab roughet sestina Irishian numerals conductility unreferred anticapitalistically R.C.S. sovkhos muyusa pyocyst datch Iphis Atreus abature self-renouncing cellmates unindifferent tostado bulder silver-lead overloyal Un-thespian predicability imparted Adib tinderlike thriven tailorwise Rowlandson tollbooths convocationally unreassuring offpay outwitter idylian annect Lolo full-fruited atlanto- recoveringly Post-babylonian nonopprobrious half-true acylamino hierapicra auncel nonhardenable diethene- rose-gathering spiry overimportance psychagogos aliphatic enrol middlesplitter etherin Kastner confabulations semiphosphorescent Sylves" (Indicator: "twitter")
"stans idyls tarried ministered unmedullated postdysenteric fossicked titrable salesgirls portion Momentum signalled iodate packet-boat guiba noncasuistic sympathique blowiron Nahamas militar a-twitter myrmekite pyknosis purfles oophoron unchidingly rough-spoken estafa espressos dado slimed Wednesday globe-trotter diseasefulness nonracial blunders yelloch loutrophoros scintillations shfsep chowdering mercurializing end-stopped forwhy honewort fricassees photozincotypy hivelike edgewise subsidiarys bears unconsecutive freck nonconceiving concessory hemacite emda anemias confessant KV lipogram Epacris needlecord lalang periomphalic classically Capitola hemihedron Mirac leechman preknowledge discriminatively affrontedly antiracially pseudoreligious pharmacopedics zizith atatschite decaying hoernesite jalpaite Valaree abecedarians analytique circumarctic round-up uncompahgrite Rosemarie confidentially Miller unidextral dumber y-blennies Bottali dentin stam cesium nitr- tetraploid Frobisher Ancylostoma piggyback er" (Indicator: "twitter")
"ook-headed desperadoism forgoes steeplejack nerve unpolitical Monophysitism Desdemona cornerstones Romanity Qishm harbourless dumbfoundment undercooks dizygotic staphylomatic prismatization ziram maniaphobia rolled extrapunitive resimmer overawe ratchment farsightedness webbiest analytics sclerokeratoiritis capilliform Pate actinograph korumburra superhypocrite single-acting Bethezel choosable shufflewing Berman Yup misfortuned scratchlike bunolophodont posting re-embattle untransmigrated preadopts twitter-twatter niggardliness acuerdos zooflagellate brambling circumsphere loamy tripmadam perfectability overtaxation outjuggle receptaculite worldbeaters cyclindroid first-formed hectoliters despisable symphycarpous multiplated hubcap Penasco tumefying thenceforward semifused angelet flustrum homologue Leptodora Kellyville bedraping katalyze ovalwise discovered alkalinuria sprusado FUS excreting Paracelsistic solemnest reincarnated Podsnappery matrimonies ontologies carbuncled swordless Durio heparinoid merchant" (Indicator: "twitter")
"ity hydrophyton self-absorbed traumatizing vomer bines Mamie amateurism wolfkin zygogenetic unexhaustively orthogonalization lobworms neoza metrocarcinoma subnitrate anticolic all-forgetful glossolabiolaryngeal pluviograph floodometer mastoparietal l-noradrenaline musk Wimbledon Origenism apparency drabbet twitterer Getic flueless anagnostes Ardrey songfully hinnies deadpan rhytta protolog nematology demoralisation tittup unfurred Calpe misdemeaning epact pochoir confirmational biotechnological vaneless Asherites Vola unforecast conspicuous Bosler salmon-breeding hangtags spacemanship hectostere tremulously rampageously enfacing brutality stone-colored helewou chafing submontagne overmonopolize ampullary misters gamopetalous Helice colourlessly IOC predispose pruta defectionist warmheartedly epispastic missteers trichloroacetaldehyde doddies uncontrovertably Areopagitic superheroes tawny-tanned caricatural fleshiest ostiarius aspidium inclosure Comanche CVO equiprobabilism Stoll stepstone shapes franticness m" (Indicator: "twitter")
"idal pediment crystograph vese ectocranial twitterer arteriograph uncautelous rusher hoardings drag-down unripely SASE Temanite pharmacologic unstuttered Grilikhes dustbin bielded sulfuret worshippers intimidate schematic Hesiodic druidology capitulator humidifiers aurochses overwing Griqua low-geared chirimoya amides fire-worker inae overlightsome Aretha conical tangently attributional seconder brand-mark begrudge sorehearted deadhand anti-Jesuitically symbolizes taximetered unpremeditately oversentimentalism clubdom bosom-breathing late-found disphenoid Armil Francene petty-bag Columbid thiswise unending suggestionable standpatism ablepharous Canistota neepour monosynaptically taenidial prosiliency prorefugee nondiagonal cabecudo deadlocked experimental abysmally hippophagi misnumbering cleanhearted protopoetic Rhopalocera obstupefy wemmy semicollegiate deacidifying spinous-tailed hip-gout casehardens Philibert limit-setting fecit photocomposing portunian whipsy-derry flicks thyrotoxicosis sizeman unallevia" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
- "wscript.exe" wrote bytes "c04ebf772054c077e065c077b538c1770000000000d0ef7500000000c5eaef750000000088eaef7500000000e968cb758228c177ee29c17700000000d269cb75000000007dbbef750000000009becb7500000000ba18ef7500000000" to virtual address "0x77D11000" (part of module "NSI.DLL")
- source
- Hook Detection
- relevance
- 10/10
- ATT&CK ID
- T1179 (Show technique in the MITRE ATT&CK™ matrix)
-
Installs hooks/patches the running process
File Details
JVC_78765.vbs
- Filename
- JVC_78765.vbs
- Size
- 4.8MiB (4985521 bytes)
- Type
- script vbs
- Description
- ASCII text, with very long lines
- Architecture
- WINDOWS
- SHA256
- 95aa30c12636d0c8803e799e1a7c1d80f7485876121ea3a877de5b82b1b6a86a
- MD5
- 5624fe65089e1acaea3bc12aa062b913
- SHA1
- 051976e5bd05080ca8e01ee3bb9c679b405f94aa
- ssdeep
- 49152:nqIMJBTIE+x060txX6w1ulPCvAZ+CYof9Ga3VxoVckKO5GCJdecMuGkBgTMPCqMV:B
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total (System Resource Monitor).
- wscript.exe "C:\JVC_78765.vbs" (PID: 3232)
Network Analysis
DNS Requests
Domain | Address | Registrar | Country |
---|---|---|---|
csrkanjiza.rs |
91.102.231.82
TTL: 3599 |
- | Serbia |
Contacted Hosts
IP Address | Port/Protocol | Associated Process | Details |
---|---|---|---|
91.102.231.82 |
80
TCP |
wscript.exe PID: 3232 |
Serbia |
Contacted Countries
HTTP Traffic
Endpoint | Request | URL | |
---|---|---|---|
91.102.231.82:80 (csrkanjiza.rs) | GET | csrkanjiza.rs/wp-content/uploads/2020/02/ending/444444.png | GET /wp-content/uploads/2020/02/ending/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: FlaskPy
Host: csrkanjiza.rs More Details |
Extracted Strings
Extracted Files
No significant files were extracted.
Notifications
-
Runtime
- Not all Falcon MalQuery lookups completed in time
- Not all sources for indicator ID "string-24" are available in the report
- Not all sources for indicator ID "string-5" are available in the report
- Not all strings are visible in the report, because the maximum number of strings was reached (5000)