JVC_37764.vbs
This report is generated from a file or URL submitted to this webservice on January 28th 2020 16:33:53 (UTC)
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
Risk Assessment
- Network Behavior
- Contacts 1 domain and 1 host. View all details
MITRE ATT&CK™ Techniques Detection
Additional Context
Related Sandbox Artifacts
- Associated SHA256s
- 8423dbb95da56e6bff8c04fadac5ec107e769a78af1155c7ec63e28548bb2165
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 1
-
Unusual Characteristics
-
References suspicious system modules
- details
- "ingness voluntarity nonjuridically Sukarno kotyle sliping Odontopteris steins expeditor Dacoma bloodshedding synchro- Koralie outhumor non-literate compellably world-shaking assertoric aperitif activated participability watery-eyed galls rodomontaded endeca- chondromas guileful nongerundive cosmography clavichordist tardiest picudilla Pazit Olly reinterment Tachinidae Flavobacterium bimedial bargainor altheas apprecate osteostixis Moreville Ophiobatrachia suberect horsemonger incapabilities supernationalist Finlay counterargues catepuce tie-up synochal twice-provided Messinese ornithodelphic gaincome cravat preedition Plesianthropus perigraphic Dresser tetraedron biolite cyanamids wide-eyed fishified Leonov peavy telesm toshy criticisms OSS unhinges unoverleaped Perice jagong cyanites beehives Gawra Sheeran annalists high-hattedness elegist Clichy Kalmar hypocondylar pyrosises encephalonarcosis bruiters lammy breathability upburst boozier Elsass overmultiply half-expectant enthusiasticalness DAS gentlehearted"
- source
- File/Memory
- relevance
- 5/10
- ATT&CK ID
- T1215 (Show technique in the MITRE ATT&CK™ matrix)
-
References suspicious system modules
-
Suspicious Indicators 3
-
Anti-Reverse Engineering
-
Possibly checks for known debuggers/analysis tools
- details
-
"On Error Resume Next
dim bFc, uBuN, rNZ, abfa, OKpA
'neuroanatomical anticensoriously aerosolization Monopteridae whey-colored dyssnite Majagga Tontobasin hamulus magnetomotor sirenically navalistically tonged twin-headed aegrotat unselectiveness interloculli noncommunist Cades penners BPPS bemurmured nonelectrized tenontothecitis extensimeter pragmatisms earldoms Winona Marelya sunnas tremogram chaperones Annamite quasi-religious viruela Sialia incompetently archtempter personage reprobing revengement Garner gloss- Hemipodii acerbophobia poisoning proceedings hoodoo ohmmeter unshunned self-interpreting explode devalued quetzals andesitic brachycephalous gelechiid organoleptically agrologies chronicity interpolate half-lived haplopias thermoradiotherapy preinfer floccosely oftness nomades patente Carlson danaide photosynthesize poignado Piperales Rozella pomelo forewaters compilement cunctatious Heyduck glyptologist deadhead microphotometrically infields promonarchical smooth-foreheaded tarsalia triadical do" (Indicator: "ntice")
"clavierists efflower carrack hazardous sidestrokes off-key quasi-classically noninvidiously unbefringed Louisville overseeing Chuck west-endy Cabrera goodbyes animalizing micturate ingravescence cribs dues Fults exacerbatingly knee-deep Leigh antbird rechartered stage-struck trawl liquefying hypoplastron land-girt gutling Machetes muffins U.C. self-opinionatedness disfriar copihues silver-haired enticer WAAAF orbity transpalmar carvage milnebs sous- Seligman unsoftly pokeweeds greyed breaker-up verbality Raycher unconciliable half-length Rubenstein homegrown muzoona hijackings haen gaudiest subcontained smileful equison edificial bubblers brochidodromous stomatodaeal Medicare glycolipid sparrow-colored erotopathic galoshes ennoblers snow-drowned unfrugality deteriorism mooting grugru outpouring bookmark doublehandedly water-struck achromat Polymnestor stack forwork reguaranteeing malandrous shacky zibeline inexpleble unseduce Strombidae overviolent constitutionalization metoestrous Evelin subchapter unhappy F" (Indicator: "ntice")
"ke nonemulousness sugarbird hexadic unregardable ptyalectases sauced Kruger oleomargaric solvend evading copycats PCI reframe channelizes stylelessness Sabula imprecise referendaryship intensionally praya unperturbing Lohse pyrotechnic iridian flapmouthed relinquish sleep-walker Carnival flashingly demineralize dissepiment herbarial admiration exurbanite cumulant Florance sublayers unrecountable meaning Christ-imitating himene fraenulum Heather persistingly green-breasted surprint metrifier counternoise potentize wastrels cobblers underventilated chemosensitivity punishments quadrupole cro Cotyttia trekker incendiarized monomorphous Greenlawn Sabazios onwards vaccinogenous antiballooner massedness sinecure hieratic Pelomyxa grypanian Hopis unapprenticed disqualifiable explicability towan bilks preregisters heigh snool bowled vitochemic reticulatoramose underpaying unrobustness titled Angle Cestrinus topsoil runite cockish unscholarliness vasty byre-men puncher archlet peridinial dispathy transfusively Trithri" (Indicator: "ntice")
"cks hemochromometer parallelotropic slovenwood Giraldo gradualist myelemia hippiedom Maregos half-world Caulonia intimations triduums haloesque air-express costage capons flareboard clitia sublimers flowmeter beefburgers Ciconiiformes cooth epigraphy porphyrogeniture hiplength light-legged embellishments resin doxies Keewatin clacker notabilities auscultascope IADB Prior disseising valethood catabolin fubsiest Sessions Todidae Androuet DEPCA precocities vinas foretell nonacoustic magnetostrictively self-initiative outgeneraled unfrigidness well-fended zephyrs unspeculatory Broderick antherless scurvish pale-face statelily euphorbium thoracentesis barghests arkoses carryable homopolymerization athodyd playa pretracheal subelementary isotypic jittering Collembola quaesita sillikin forthcome crotches unedaciously secerning saltfoot Datnow timbal keeners cutlets gype blastoderm lamelliferous ejections animality candlepins unatoning grumness sound-winded gapeseeds prentices overloose friends papern neck-cracking D" (Indicator: "ntice")
"Bolt Judy Lutheran tricing overapprehensiveness nymphomania torturousness teratogenetic hypophoria untown schematise havers bankruptcy dodecatyl uncompliance Allionia Chloranthus four-winged unionization misinfers intracephalic phelonia Khotan marvelry flossily subclavius paper-selling Lemar spaught vice-admiral Wyanet infinitum zeugmas Blondel bigwiggedness unweighable Montanez Viewtown Pasiphae pillowbeer Anjali lambhood squintingly spokeswomen feinschmeckers mosker slapsticks controllable-pitch sclerotal plane-polarized pneumodynamics inoperativeness specialist Eolande wheel-cut Pentastomida sacculoutricular unopprobrious ovispermiduct low-flighted Woodbourne alewives mis-spell wlecche dacryohelcosis oxybenzoic unanalytically migrainoid bevatrons appersonation Sandwich stagion menacing chromogenetic capeador self-training forepost shieldmaker stegocephalous unprefaced electrolytic holocaust featheredged essee superaltar Boris advocatrix Benkelman botanists shapeshifter gay-colored overright anticentralism" (Indicator: "ntice")
"orker outlled lowed orientator patrix nickellike unanaemic salpingostomy Gertrud clamorsome bricklayers Linasec violer Treronidae Woodward thin-set tip-tilted cinnabaric pollage nonsolid snarl back-number temporal commendment unthrilling Pro-arabic enslumber redlined crateful Cinnamodendron questionnaire Chiromantis galactotrophy Anaces narcosis Pro-carlylean soldiership hypoplastic Wrightsville docken indeterminancy joyfulness interbank deadfall castles insnaring sticheron incrementalism murkest re-request unguentary Sagra lapwing anticeremonious cerevisial biod pig-dealing masonically Anomala postpathologic ect- transacts SSPS ungracefulness crambambulee ultrafederalist Sevigne octocentennial irregularities haleru chandlerly tridimensionality unstubborn dematerialized poikiloblastic elucidations reinterment empanels aquotize azimuths squawkingly highdaddies sixtypenny organist Discomycetes Durandarte dispatchers two-pass hydurilic screech prickling lead-in adoring time-tried unpitiful alchemists tetroxide u" (Indicator: "ntice")
"anized melezitase Tabanidae conveyable derelictly poppy-sprinkled trekker fragged entailments Denticeti unscience Cassidy hayers undepurated unpharasaical antignostical tear-shedding swingdingle buying rugose-punctate tetrabromid geeing Eichendorff SERC orbity endoperidial embroiderer congregationalists semiproductivity well-gowned heneicosane ANI Platyptera MRE perirraniai burras-pipe hedgingly pyrolater earthgrubber Kirghizia Marsupialia nonvendibility tribal Teaneck Echeloot whenceeer tweedier querre palestrae hydrolatry carvol impotence Nantais instant disembargo veteraness evolutional waxplant fishpond tactite construes Roderfield sheafs conflictingly Stettin bromoketone heavenliest overthoughtfully hoverport phon mislippen argentamine scrappet subfascial Charollais bumbling honey-bear ahartalav succubae Julietta overmatureness 2,4,5-t Zontian resistful airfield scrawny slantwise thermoperiod bullalaria linaloa enjoyer mind-blowing culpa statutary Moshell unaddicted salamandrine disprovable standard-bear" (Indicator: "ntice")
"e Anett osmeterium murker phylogenetically decupling stunsl exuberant Marxianism mistresses mumper Hyacinthia Seeto pleasant-featured Tereus superexceptional temperish Marita direct-examine proconfiscation hypostasizing seedsman Skat Wingdale 20-point rhotic promulgatory criminaloid prenticeship renewedness ATTCOM RSS overlords clusteringly smoothens stomoxys Scudery juggernauts sassagum Leetsdale appressor jaywalker heder spinous teetering half-deservedly edulcorating red-belted velleities aceanthrene Giusto chorepiscopus tapinosis Cohen dog-sleep nonprofitablely capitoulate Microrhopias misstarted well-laid athrive pre-expand boombox stold ichthyophile chaus conventionalise kynurin somesthesises triple-turned corke Slemp videophone supereternity lower-cased phototherapies unintroducible mutualist Latinesce hollow-ware pluralistic nonsuggestiveness adamantine paring favonian twin-spot Bipalium atlatls sole-stitching Nabila oilometer fattier Rivi binate honeystucker gerundival governorships victual great-gran" (Indicator: "ntice")
"alize self-relation tibiocalcanean voluntative Bordeaux stagflation Terrence anticensorship earning Staphylinidae Amygdalaceae hospices palpal kaliborite slip-on Echinorhynchus weigh-in aphagia protoleucocyte poussie oversolidification stoit Hebraic disenfranchised vice-viceroy dough-kneading Centauri Crosby appreciatory copper-melting novelties unenglished clavacin Shorthorn wistened subgeniculation well-manufactured tomboys psychobiologist enditing overbrow paraspy Belcher Macomb Bogosian devolved exothermically faufel sable-visaged concaved supplanter bastions cuttlebones snooted jolter delimiting Veronika anonad contrails precontrivance hairbrush hypnotising antievangelical steeples Tomsk unsquirelike simplenesses nonprominent meile Socratist Marattiales VTOL overanxieties Narvon merice crabeater ewelease jubiles militarizes saltmouth watchword whity stirruplike cothish sitao toxolysis Shango received glassless machine-broken atmo bisontine coal-loading urechitoxin turds ACC Loxolophodon calvity transreal" (Indicator: "ntice")
"s quinellas reyield linseed Jemie carburettor praseodidymium viviparity cystose fluxgraph locution Nola Urbanus rajes ergates theorician camblet Westfahl acholous Collierville rubific admeasurement flensing Jobs-tears well-stretched prissed septillion uncogently underspecified nominately forecabin BSLArch coalitional myxocystoma vulcanite cotan pians waybill coalface begemmed twin-tractor delays evil-headed salvability ilth counterenamel castice Elaps diander extradecretal Tucum gangliar nonpoisonous earsh Yamani bedman interrogation mainstays radioteria vavassor disclosable Ursas Janeiro Hagstrom Berryman two-bodies predefinition gannetry enticer untruss arriccioci sulphadiazine Boykin autoignition mythos serpentize quintuple-ribbed autophonoscope Schild procurative perigemmal samekh perhaps tripotage echini locoism intangibles crimpled flirtation-proof observership unfueled leatherize fadlike skiey adroitest isoindole involucre androgynus pre-envelop rear-horse sensable waxes charactery hydrorrhoea undiscon" (Indicator: "ntice")
"ndeliberative enduement heteroblastically sleepmarken astrophobia zithers interzooecial recueil whooplike Biela idiogram Connelley thin-cheeked re-desert puppyism nonprorogation taxeopodous diffluent clunter vesseled nasosinusitis enjoiner coprocessors hyponym recherche cognised millionairism creophagism summates unglutinate ill-placed erythrophleine ganglionitis contignate Selwin Cloanthus waffing exophoria gals couponless vilest lazulite terephthalate Asteropaeus sics reinstallations Heydon Gijon fearers perirraniai innless bezil mooniest paleoglyph floatplane de- phyllodineous barrenest hypoalonemia restringing biomedical joypops reascensional fitfulness facsimile Hansardize sin-sickness stencils gillnet hypermenorrhea creasier pajahuello pistacite onomatologist overdeferential befriended ewerer camshafts overran preimprove PERL kansans libidinally lymphocythemia Loughlin fortify Martens stabilisation tetrodotoxin underprentice ovules antilevelling mischaracterizing ISC senam preassembling reuttering enkin" (Indicator: "ntice")
"-mouthed tenderloins rhizinous bouchal unevincible turfy mesitylenic pharyngotome forestick lenticels interembraced flitch anchorites sinky appestats Nissa trunk enflame backslapper plankage retuning hippophobia subsensible gimpier disemprison outbar caretook starik alienabilities saner tinselled amacrinal Caneghem winkled disunified Huneker Epibaterius Torto typhomania jungles sanctionment Shaya titbits Doric adjutor endoperidium firmarius self-impartation pseudoperipteral ethnomusicological muralists fadridden osteoplaque glunimie subconformable self-dedication kraurite star-gaze porkeater encampments riffling intendente cowberries Glassboro minimarkets Penitente Bettendorf unoperculated Shakerdom exportations drogher inspirations evenoo concretist cement-covered Arhna world-preserving bold-faced Arvie Isuridae Balinese uncriticized tartronyl dehydrofreeze recoinage johnin nonoccupational mathematician estating life-devouring unfundamental turpentines SOAC balsams Rusert entophytal ambrette Bion synezisis e" (Indicator: "ntice")
"scrapy nubias Sabah antidivorce odalman fluidization Crenothrix smokehouses cratemen gazogenes disaccustom homophonous exsuccous sporocyte Treacy nonillion manlier Emiline fulcra Beaverdale bayadere cruddle nonextensible enticement unerosive tonk yard-wand folily Erfert antemetallic overhelpfulness emeriti small-arm tenore Nerin Non-cymric subtilties Stuppy throwaways Hellenisticism Serratia ametaboly Europan heavyheartedly unmoody jaguarondi Trenton anticardiac glycaemic marok expatriating muslinet metaxite destruction audiometrically sourball madrigalesque tantarabobus capituliform osculum counterpoles progressionism trackbarrow cormophyte vertiginate floorers undernourishment stanches Greco-bulgarian thick-coated plume-plucking overcorruption Cowell favus yblent hobnobbing Mid-may wonder-work feudalized Scombresox Marette smoke-bound thorn-encompassed anally unisonally fast-breaking vestlet JP re-remit thermoelectron gigabyte latent classifiable kitchenware Cervin dazzlers rum-selling Filibranchia imbrute" (Indicator: "ntice")
"ully overfrankness plight virify usedly Alger MCNC self-possessedly tragedious abscision wounding childlike gariba underpry subduedly doctrinize ceilingwards delineative caulicolous trolleyful unfollowed himwards maintaining Ginnie Kum thunking climatological mudweed alarums atmometry chemicalization IWW ever-friendly polygenesic larderie chuckawalla Santayana outhector dying taurodont retromastoid tuberclelike intensifies keyboarded make-way relapser salves neist ETACC Aria Chautauquan wish Traunik subridently anthropologically antimodernism ronquil disappearances thunder-scarred Canamary perceptive sanguimotor arseno- albumino- nonautomated didacts consorting FCCSET cartilaginoid mesoperiodic cooeyed Poyssick unmiscible retentionist LSD cymae dialectologist carcinus gruntles exuded refilled viticeta nasions spick-span-new epizootology haori lady-fish apprenticeships unboxes quasi-inevitably swordsmith oligoprothesy walky-talkies contractus verve groundnut Ting unangrily Springtown mopheaded spatium evadable" (Indicator: "ntice")
"ypnotistic tph screendom quadricyclist acuminous prizes cotton-picking scaledrake wholl execrably Martinsdale ungripped Brisbin subintestinal ventrimesal side-slip cobbs roweled unimmediate Erytheis ferrean attestative grub-prairie Daguerrean blaspheming didynamous kneelet lunkers regressing VF ELO abakas aldimin splanchnemphraxis effacers porridges phylacteries silk-robed beetler Heautontimorumenos caunch semiglutin chrimsel Arawakian all-or-none lepargylic thermometer porringer elks provisionally discerner seeking ronnel arrage topwise overhype playsuits Shanghai mistemper Hissarlik penetrology leviner vipers beseemed CSE triflingness picnickery polygar UNIVAC chromic needily Rucker heterogenousnesses unapprenticed Myrmecobiinae presuperficial half-lunged potestas check-stone gonococcus gasmaker pyrrodiazole neuralist forty-three milsie connotative captivative edulcorate lycosid superrational gibbing O- Pouilly-Fuisse swabber pseudophenanthroline pseudopermanent nonrelinquishment treasure-bearing fraid mart" (Indicator: "ntice")
"torpitude entracte lollers bedesmen chalumeau stone-eared perchloroethane tradition spiffing repealist boylike filth-fed rebeat moistify gemology Englishism physiologian hurdled ecphorias mollycosset stylizes dezincked ritely hamacratic SBUS strong-ribbed prefabs cuttle-bone acheat nonconstructively low-minded Portulacaceae espials crispened prentices Linnette Eumycetes gramophonist valleyite cotylophorous Paulina lilted Gamelion soaplees cattle-grid cockiest manubria court-tialed overpack Bast counterguard mightyhearted bearhound generalizable morphonemic boredom glyoxime hylo- cold-nipped half-smothered muumuus undefiable marshes genitalia swarty solates locust Biometrika orsel foreconceive cutidure blackcock Pasch unconvince neuroticism intricate dekagram tempest-proof mosaicist noop sleevelet perruthenic birodo corticipetal Frenchier pomps scepters self-adjustable quinaldine cyanoguanidine advises metricated mealing digressively reddish-bellied BSFM pseudambulacrum wanderingly colleterial resume classifie" (Indicator: "ntice")
"vitated harassness soon-clad Cost Hinze prepractise Hogg unimprovised Sikkim Storz encomendero athamantin Bayboro skel Lorence departmentalise Cineraria cuddie tongue-taming candidates bottomry huzoor open-sidedly evaporative graduale umbril aquarellist tremetol metatoluic cousiny autoing widdled titer antisensitivity creambush wisdomproof rumaged enuring phyllophorous undeserve aliened Assembly bulwand morass Okubo galactopyra calzoons holing ascertainability anadicrotism well-deservedly musive talking-to intergrade ridder prevention inlets tartest whitewasher unintrepid measurelessness preaffliction recreants veiler etapes becompass dickenses cost-plus morigerate speedboatman cloak-room Bowen Sarepta confervous overtness bewend Cyrenian white-leaf reliquefying freeish monticellite cephalometry cow-fat eczema achete outbarking beaufet unhaloed Thanjavur profuse freeholder managing Gle discontinuing trunk-breeches optionor Blackville sod-bound kampylite fuseboard irredressible satiates nonratification oversat" (Indicator: "ntice")
"hless spectrally tissue hyponeas glassful Persephassa six-year scrutinizer vibrating somatogenetic pectous hearable Scorpius dispensational oleos gee-throw somatotypy pseudocyesis jacitara pizzles appleroot benevolence domains pickoff tautopodic Manatus enstool amboceptoid diaphragmal miauer disparages yoo-hoo stepney naphthalising abolitionized ziphioid overtolerant prefertilizing altogether veratridine lexes selander hipbones Sarahann coli reevidenced unprofitably stormwind gerbe admittances catapleiite overactivated butyrolactone pudendous predivide churchlier menostaxis forsado elepaio objurgative Hiawatha excuss charcuterie animalivorous helepole white-sided jointlessness militarized opulency irrepresentable Pro-freudian steatoses disconnectiveness Catamitus austerus dilli terminatively Bodb rome-scot Bonneterre brinston ophthalm redelivering thwack cubti sour-tempered well-amused impostures broken-winged bonilass latomia diarrhoea minatories Denticeti DAD vouchering unrealness Moffitt unpriestlike glidd" (Indicator: "ntice")
"xpurgators heteromesotrophic aerodontia harpwise Polinices wooden-pinned Sisyphides bornyl self-coherence Scribner shavable isopach forwarder gith Harpullia Crow unfibred tackety cichoriaceous overbookishly earock lunchers vacuolization Christianness goldenwing minimetric presentation navigerous cap. speculatrix berat somatotypology Ronks Wilkison Clardy septendecillion wefty schismatically praenomina phyllomancy QSY nonundulant anthracolithic unterribly Pantagruelize Traunik unarguing Gabby democracy scallawaggery involuntarily ribbings overcopious laundrymaid bootlegging mixblood dere Kirsteni peastick toadhead reincluding kinaesthetic masterwort fame kirns unambitiousness drillmaster namelessless antiscientifically philodoxer mulatta quasi-truthful scrummed rebounder take-home Brahmsite rationalizers doctorate futzes twanglers lenticellate straight-lined scientificopoetic quartz-monzonite projection vegetable Wyn snack Gotham hobnail McCartney adneural endotheliomyxoma Bourgogne Secession incentives self-g" (Indicator: "ntice")
"are honey-guide abusivenesses Gilley paraffinic veritas stichomythy Sadachbia school-bred water-color noncurrency inadaptive ilmenitite armipotence Anti-paul philoneism beam-bending Ringgold tuckering isomagnetic clustering Masao Sethian Ives Burberry telltale underwooded firetower gulfing miles accompanies twice-accepted Fascisti squashy Mommsen Lutuamians helminthology semirarely spleneolus Celtist hypercapnic sals apprenticehood isoemodin LORAN hoed vaccicide Branting mizzly fructified farasula Jedidiah unwakefully Otomanguean oblongness bowyangs thundrously nates memoirist Decius Protagoras knapsacks mesoxalyl-urea miniaturized Pentacrinidae wool-burring haunch-bone Carbonarism taskmaster SIT mallenders prepositional black-tie attainment resistively triple-expansion halvah Collier zelotypie Dufur storywise redemand ramparted ash-throated pondman mordicative Rutlandshire Portie czardases Germanness straitsmen Mina inauration wax-producing overpensively abolitionizing hyraces shoebills attitudinised Charita" (Indicator: "ntice") - source
- File/Memory
- relevance
- 2/10
-
Possibly checks for known debuggers/analysis tools
-
Installation/Persistance
-
Executes a visual basic script
- details
- Process "wscript.exe" with commandline ""C:\JVC_37764.vbs"" (Show Process)
- source
- Monitored Target
- relevance
- 10/10
-
Executes a visual basic script
-
Network Related
-
Sends traffic on typical HTTP outbound port, but without HTTP header
- details
- TCP traffic to 64.227.7.85 on port 80 is sent without HTTP header
- source
- Network Traffic
- relevance
- 5/10
-
Sends traffic on typical HTTP outbound port, but without HTTP header
-
Informative 9
-
General
-
Contacts domains
- details
- "productsphotostudio.com"
- source
- Network Traffic
- relevance
- 1/10
-
Contacts server
- details
- "64.227.7.85:80"
- source
- Network Traffic
- relevance
- 1/10
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
"Local\InternetShortcutMutex" - source
- Created Mutant
- relevance
- 3/10
-
Logged script engine calls
- details
-
"wscript.exe" called "WScript.Shell.1.CreateObject" ...
"wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.CreateObject" ...
"wscript.exe" called "ADODB.Stream.6.0.CreateObject" ... - source
- API Call
- relevance
- 10/10
-
Contacts domains
-
Installation/Persistance
-
Opens the MountPointManager (often used to detect additional infection locations)
- details
- "wscript.exe" opened "\Device\MountPointManager"
- source
- API Call
- relevance
- 5/10
-
Touches files in the Windows directory
- details
-
"wscript.exe" touched file "%WINDIR%\System32\en-US\wscript.exe.mui"
"wscript.exe" touched file "%WINDIR%\System32\rsaenh.dll"
"wscript.exe" touched file "%WINDIR%\System32\wscript.exe"
"wscript.exe" touched file "%WINDIR%\Globalization\Sorting\SortDefault.nls"
"wscript.exe" touched file "%WINDIR%\System32\scrrun.dll"
"wscript.exe" touched file "%WINDIR%\System32\wshom.ocx"
"wscript.exe" touched file "%WINDIR%\System32\en-US\KernelBase.dll.mui"
"wscript.exe" touched file "%WINDIR%\System32\msxml6r.dll" - source
- API Call
- relevance
- 7/10
-
Opens the MountPointManager (often used to detect additional infection locations)
-
Network Related
-
Found potential URL in binary/memory
- details
-
Heuristic match: "productsphotostudio.com"
Heuristic match: "GET /wp-content/uploads/2020/01/lane/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: ElixirLang
Host: productsphotostudio.com" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
"ess demilitarisation dragster neutropenia sallies catchie lrecisianism re-engagement astigmatizer parchment-maker acrocephalic dialy- oxystomatous mangonels stinkibus remanifestation barley-hood tzarist deuteroglobulose ealdorman kette throstlelike horstes monachal Trevethick acupuncturation telepheme tucotuco realists pseudoculturally pancosmic hommos scarifying uloncus sparrowhawk Grosse epizooties peopleize many-pillared cheerleaders bagwoman undocumentedness Zonotrichia courtnoll consuming dungannonite emulsification Griffy Paratheria fructified disturb Corea elabor genupectoral spell-casting undermoney subpreceptor glutinosity collo- lavs intially Linette ODwyer unseparable brotherwort powder-marked asterin dosimetry gashed varitypist cryptozygous uninsinuative penal griffe camping nelumbian Ashaway dunts hip-roofed half-drowning sparagus euornithic pump-handle DNB reshaper duvets Tumacacori cacodemon dimensible poet-king DOT twittering larnax submerses flat-beaked superagency breviconic woodlouse crunch" (Indicator: "twitter")
"banized burden lichen-laden snottily poof tar-water previse electrodeposition endamebic aortic rockaby jingo cruzeiros Marasar semimanufacture wisdom Lagopus choose orchids automolite skew-jawed tergitic masculines lacquer delenda adminiculum sarraf unpreventative extrathoracic Galliccally shoq overdevelopment unsticky Bello pseudomorphosis psycholepsy oestradiol onstage buccinator cankerflower filiating unexcised cosmo- hyperdolichocranial noncommemoratory uniradial pipistrelle slime-coated Huxtable spitous lehua amorino Pan-croat perithyreoiditis fumigating microblast crashers boogaloo neoterized curtsies twittery electrosurgically Buddhistically Ocreatae amphitokal metecorn cardplaying moot-hill profits falsifications light-bodied Prut rebathed conniving maleficent chronopher counterdrain trivalency nonphonemic double-starred zoanthropy insurge CCW Trichosporum backened supersarcastically vagotony indigene Wirral stormed undershooting irrelatively biform Sistine spelaean endocardia superintendentship micat" (Indicator: "twitter")
"aft dead-heater termers inhalants louche hereticalness nonselective microplakite semirebelliousness lymphangeitis parturitions unevaporated paradisally squalor Cataula Centiloquy premastery papyrocracy straight-horned Dorin coof hearting gangliest Seid triple tabulators trailerist antiparticles waister auxetical anhedral necessities dormancy cocillana eucrite kokan borracha old-established kthibh trigonododecahedron bebotch Calderon antienzymatic unrewardedly SEbS nonsubsidiaries mamlutdar multilateral wifehoods Shoshoni fs panetela str. funambulic tomboyish left-hand teguexin Oncorhynchus paristhmion hereditary nontransiency aggradation misaccentuation boroughwide procurement monocled Fucaceae taupe-rose glamourousness Perisphinctes belltail Fredholm a-twitter lexicographies mules commensurately caum backdrops conform snobbishnesses tule daisy-painted hypotrachelia permonosulphuric sparth phosgenes Cando summonable Russo-turkish Cebidae Savonarola imperspirability Kaya overembellishing unsaliently foamable j" (Indicator: "twitter")
"discomposure pipe-clay knightess falling-out Jonathan Kakalina freeze-dried urotoxies candescence hernani Swann elvishly zootaxonomist Typha prewound enteropneust turnery cucurbital mannerlinesses ultracondenser rockwards eched electives kaliborite abstersion panfishes nuncupated atwitter Bembecidae surrebut contiguous overexuberance Colwyn stallion ornamented lather nineteenths scrampum subject-object inscribableness thurification Obaza terrasse reprimander eslabon bissextile afterhend regrinds patriotisms book-learning broomcorn unshout sneath unresuscitative aviarists murnival pentapolis perceptions unpiety wealthless counter-nebule Howard chronophotographic twice-adopted cystous familiariser ill-mannerly half-important kersantite outshift deuterocone shatterer demilegato seafarers metalbumin creamier Linder well-scrubbed flaxseed phlebostasis aggradation seven-branched Plotinian sweatproof sentimentalist tabacum synoekete Mllly Childermas unequivalently centervelic Benedictine unproficient zipppier omnime" (Indicator: "twitter")
"eers lip-round semisavagery oversimplicity bityite untomb clangingly wet-blanket Mirana jackers cretonnes bishopess twittering Truesdale contemptibleness unbeneficial nonethereal piazzaed saponin propenes finialed gibers noneclipsing mighted thalamotegmental laparogastroscopy Ballouville ETACC paper-shelled unisolating cliques eye-lash reductional lambdoid devolutive unbetide pneophore fifteenthly Kobylak Extasie irrepressible bluff-headed hubs Zumstein sparganosis rolliche hydrazide ever-strong phantasmagories oleoptene hypophyse unlamed sphacelotoxin consciencelessly chufas Aufklrung cupboards nonimbricate monopersulfuric corpulence romyko delightable Lose shape-shifting urethrovaginal conc condictious contemplamen pilcher nomine intercalates rememberer to-break Perrinist geminous permease Bradford tetanically insularizing piousness Coregonidae fingerprinted morpho- interungulate parodontitis orgulous counter-step Bangall admissibleness fiber-faced Nabalas scratchweed isotony sarcastically spaciosity Dupaix" (Indicator: "twitter")
"elot nudeness Argile levotartaric sandfish fastly Nusku Laotian unconsideringly parasitogenic slender-podded Cher draggles pinchbelly santol junky reabbreviate positioning twitter nouther Batta hydrocarbon supercube yellow-fleeced nervosity customaries Onobrychis cuboctahedron self-solicitude mycelial Murraysville Lowrie culicids interspire prolixness Ger shoddywards CUA calomel zookers proctorical albumeniizer NASD Cuchillo cruisers solicit Interphone climatological Paulsboro innovative pagods anaglyphics oscheocarcinoma serpigoes invalued nontolerable apparatuses derangements entwist jubileal menstruation horrorful potholes Tevet squabblers unripplingly tritish ionicity tetrapod meliorative cis- grosshead ceratinous awake creirgist connection offendedly Kissie luteinization coopting unallayed Leinsdorf JILA janisaries Pro-dalmation metrifies corklike azure-eyed worst Ondo looseners diplostemonous Portulacaceae shelterlessness dahs ice-house double-track ISS toil-weary crumping Mahoney Zambian jailers epicyc" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
- "wscript.exe" wrote bytes "c04e737720547477e0657477b53875770000000000d0297700000000c5ea29770000000088ea297700000000e968887582287577ee29757700000000d2698875000000007dbb29770000000009be887500000000ba18297700000000" to virtual address "0x77601000" (part of module "NSI.DLL")
- source
- Hook Detection
- relevance
- 10/10
- ATT&CK ID
- T1179 (Show technique in the MITRE ATT&CK™ matrix)
-
Installs hooks/patches the running process
File Details
JVC_37764.vbs
- Filename
- JVC_37764.vbs
- Size
- 4.1MiB (4252765 bytes)
- Type
- script vbs
- Description
- ASCII text, with very long lines
- Architecture
- WINDOWS
- SHA256
- f7294b3a32c95ead26ff5a820d1072b738efb1ce9b04d2cf3bf363d49233bd95
- MD5
- fb4e475c08bb08db408b6827fe068eb3
- SHA1
- 88f6b4d68d22bd42c4f9d50060f17eee0777e61c
- ssdeep
- 49152:GDpuT2fsDicYm2vYQ1ZFaLDsglIznHOqMPce7+VIv9RsG/LQXIDeqn05RIMtL2/D:3
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total (System Resource Monitor).
- wscript.exe "C:\JVC_37764.vbs" (PID: 4492)
Network Analysis
DNS Requests
Domain | Address | Registrar | Country |
---|---|---|---|
productsphotostudio.com
OSINT |
64.227.7.85
TTL: 77 |
GoDaddy.com, LLC
Name Server: NS1.DIGITALOCEAN.COM Creation Date: Tue, 12 Nov 2019 08:41:02 GMT |
Canada |
Contacted Hosts
IP Address | Port/Protocol | Associated Process | Details |
---|---|---|---|
64.227.7.85 |
80
TCP |
wscript.exe PID: 4492 |
Canada |
Contacted Countries
HTTP Traffic
Endpoint | Request | URL | |
---|---|---|---|
64.227.7.85:80 (productsphotostudio.com) | GET | productsphotostudio.com/wp-content/uploads/2020/01/lane/444444.png | GET /wp-content/uploads/2020/01/lane/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: ElixirLang
Host: productsphotostudio.com More Details |
Extracted Strings
Extracted Files
No significant files were extracted.
Notifications
-
Runtime
- Not all sources for indicator ID "string-24" are available in the report
- Not all sources for indicator ID "string-5" are available in the report
- Sample was unknown to Virus Total, submitted file for scanning (Permalink: "https://www.virustotal.com/file/f7294b3a32c95ead26ff5a820d1072b738efb1ce9b04d2cf3bf363d49233bd95/analysis/1580229500/")