JVC_36869.vbs
This report is generated from a file or URL submitted to this webservice on February 4th 2020 12:51:28 (UTC)
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
Risk Assessment
- Network Behavior
- Contacts 1 domain and 1 host. View all details
MITRE ATT&CK™ Techniques Detection
Additional Context
Related Sandbox Artifacts
- Associated SHA256s
- 434e75b3166e52b0a01b100acaa8f56ad2293afbc7e3ec96e40f3d1e55feb5b1
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 1
-
Unusual Characteristics
-
References suspicious system modules
- details
- "cacoethic chews unknowableness Malvina Alie cotorture West inbreeds pilgrimages recrossed histochemically bollworm constructions shewer white-rayed entomologising immeubles hexastich staymaking Friml calili playable unjuridically intelligenced Gyas Dadu autodidactically flocculation menstruating diferrion pectate eleemosynar noways octillions Lilybelle Gayomart phyllorhine helled penannular swabs dessertspoon reddition misresemblance Myrtaceae evangelise espinillo oxalidaceous Bills Pakanbaru faithwise unlord impanator ordalium boost sprat Kerge Angelico samvat couturier settlements wheezers macrograph Zabrina sequentially midforenoon algesia Non-anglican marcelling marblewood maritimal Colima leucocratic phytoserologic Wendelin periodid redistrain addressability jackers movings nondefeat Elsass-Lothringen securers protosyntonose Lindylou fewmets Amman waterfinder monkcraft pliss electroaffinity Kyle champart condivision labialism diprotic tickicide bachelorly syncladous extrasacerdotal adrenolysis encipherme"
- source
- File/Memory
- relevance
- 5/10
- ATT&CK ID
- T1215 (Show technique in the MITRE ATT&CK™ matrix)
-
References suspicious system modules
-
Suspicious Indicators 4
-
Anti-Reverse Engineering
-
Possibly checks for known debuggers/analysis tools
- details
-
"nstranged fordable hematogenic sora underworkman death-swimming paniconography demidistance oversupplies flashing wheelbird naphthaleneacetic indulgeable unattacked Choanephora overwake adjuster perioikoi irreparableness shebangs downcrying mysteriarch biometrician anticeremonial idiotish Birches morons unrecessively unrepressed delocalised unbarded councilwomen liver-moss Bondelswarts haggish hillculture SDR nepotism unbribed chartometer hexadactylous tsantsa summergame Stouffer Sere subliterate flukey huarizo Astylospongia landaus excurse hemocyturia gradable Anti-nationalist gibier cabildos cobenignity orography biradiated chordotomy Cathy meddlers corrosible knucklebone pro-pre-existentiary Trafford Creigh botanically department telecast graphologists Cork menstruous tautonymies Tobias down-drag nidi supernumerary outplans autosuggestions subphylar Manidae noctiferous Thevetia silver-smitten hydroxylation Cindie Schlenger foliaged anarcho transversal glyoxaline replevisor nightmare irrationalize jardinier" (Indicator: "ntice")
"bleness Corenda janitresses aerosolized moruloid knaur unyouthfulness nougats canterelle alchemistic isometry civet umbonic hypodiazeuxis virescence colliquefaction efficacy sylvites plug-hatted nondogmatical vetchling purpliness quakingly half-inferior sallywood nonpalatableness kleeneboc Lewisian busy-idle rich-conceited larviposit prentice dosa recreants besot incliner manatee surname lampooned evicted cnidophore renourishment Kazakhstan semijocularly logomania theave teaboxes seam samen Mordred row-port trichomaphyte assibilating allaeanthus curiologics forgeman Iliadist Bordy progymnosperm postfemoral fasciole chemoreceptivity by-wipe cautela unenfeebled assessorship fulgural squirrelfishes foundrous megalophonic imminent cross-worder nonfelonious mezzolithic nomic Bialik prevenancy bingeing scary supersecure diencephalon nondiaphanous Whang Newcastle basicities Showlow Hellelt positioning dexterical Pedipalpida zemni Lao-tzu detonation nonsaline Argenteuil prefract peckers disposure plur. imbalm transpo" (Indicator: "ntice")
"uccal Adiel rumbaed overjudgment Chrysis gemmiest quinas constraints carwashes embordering polybutene skips senses extracardial cyanemia ovenstone Odilo adverting scop beerbibber poetess seifs thoracobronchotomy stuber militarization hypermenorrhea dh- Kitwe interruling Severian Crysta Retepora passion-filled Acushnet nut-crack nasally trabascolo Abboud superfixes Ufa astrobiologically degumming bone-bred unhaltingly angoise unissued seven-day Haemoproteus divestible bauxitite awatch ills lenticel reinducement skyhoot unfossiliferous noble-looking novitiate blastoid chawk broken-heartedness spritehood intraselection glimpses soi-disant suboptimal ladyclock oosphere tricycled Helena pre-enthusiasm Coconino reversist Terchie ennuied precava non-Shakespearian dowy schryari undenominationalize Piselli Hubbardston pterygoquadrate ickers snowy-headed aqueo- ignitive tailsman cymarose Etana eon rough-enter proportioner squallers tetroxide mesotympanic apreynte elements sulfantimonide baldmoneys saddles hydroponist t" (Indicator: "ntice")
"lery pedanticness Menkib unlustrous Helbon Alcot hydrolize enigmatology sillibub malconvenance organists doblones Aubine Russianise self-styled trigonid overdrove Dulcine cantillated tamanduy believable walnut-framed Commiskey beblotch panheaded hillocky ponticello incubus Ichthyodectidae highbinding lead-encased anophoria alternative pillowing Trasimenus hereticize jewelling naveled menstrual ashram six-petaled unwilfully wiredraws intravascular bilabiate red-painted Arietis maintien complexionally unrelatively Gaurian Gymnostomata festivity ethenic Jedlicka Sinton veneraceous physiogeny Kuksu life-guardsman red-plumed unincriminated Seceder prenotification dameworts changeful festoons diallelus reveries strip-crop UNIX patefaction subbank botel Tumbes wit-worn misrecollect Diasia Triplett divagate Chaumont-en-Bassigny diphthongia successional botanist halakhist jacarandi perimorph nonempathic philosophers endoenteritis step-ins well-organized unrepressed bleak Keewatin neglectedness Malacoscolicine ferreiro" (Indicator: "ntice")
"tate-enforced mollify self-devotement metatarsus crapper ante-temple acromyodian allegorist uncrumpled ambiances pepsine deadlatch objurgatory goliardic postponed half-crumbling Mandingoes postgracile heart-tearing sociocentricity interarytenoid sacrorectal daynet airpost insectlike inappetence trueheartedly Primrose Czstochowa goboes gaveler reinterred stacte MacIntosh buoyed piceworth Ludditism heathenhood arbory airflows reeming weirdlessness UNICS cyptozoic intramorainic trueborn oxybapha underbasal restorationist uncontemplable sublicenses Wimauma Pro-masonic posturise coal-sifting coastguardsman interception crinion prismoid short-wooled cecchine spirit-bribing Safavid Iache unwarranness MC superimposes hemimellitic Raimondi connexes adjudicated unbreached predirect Dorothi unsoldier Steffane hangment hardwired Chader hexogen biotherapy Alicante Cumings politico- prenticed presupplication alphabetize nonpacifically unplausible fanlight poonac trithiocarbonic University dentatoserrate restfuller root-pru" (Indicator: "ntice")
"ch Aubyn unhusking tartrazinic futures aberuncator LSD vectorcardiogram Axminster Florentine Elita anecdotic nationalization aerobics gluttonizing back-looking purses brominated thyreoitis phytobezoar ambiverts subtype Aradidae archit. fasnacht unreconsidered yellow-necked splenectopia swarty PTA praemolar gripers forgetive light-gilded incomprehended diachronically archespsporia redmouth Jules Pollaiolo repriming chazzens MINX Ermengarde hypoparathyroidism anem- Hendrix dishevelling carbines ensnaringly cheekfuls dissuade Eriophyidae framboesia bielectrolysis paedarchy firebugs waymaker cross-bearer burgware statelich Prentice wardage hellishness Cyathophyllum Viny intra-aural premiership divorceable violet-headed didine blueprints nonblasphemous graith postneurotic bit-by-bit asyntrophy Reeta proser boracium extraorbitally crenation zootomically Pasco penetrativity housebreaking pansy-purple nymphal semiovally hackler foursomes poor-do nonprofitable mastatrophy uncontestant proctalgy unbowable great-grandfa" (Indicator: "ntice")
"unes Abdominales mitre-wort goombahs Brotherson furdel songster Duryea dieses vizard-wearing championships Beechmont zelotic interfluence benzoyl unamerceable anticensorious hypsicephalic reconfiscate Tocharic morphias hobbinoll esophagectomy sextur anticlericalism peripleural coroutines Neumann springwurzel bustle nonrelativistic avengement Barnabite pourquoi apostemate mercuride isosmotically hemocytoblastic uncalk patrilineally nontheatrically saddirham egall monitory pimlico Apollon gyrofrequencies Mabton firmance pyromorphism Walpapi anabaptize red-leader carboys electrofusion egress fair-visaged lepidolite Gattman Caen Chryses Carmencita sprangs Lewisberry disciform nonpossessed Eurylaimus eternities necia rutins melteth crashers Belonidae hectorship oilmen squamoso- silver-bordered engouement dazzlers Euphrasia overforcing photochronograph Tigurine oolakan sec. Penelope silken-fastened chaityas latching Tortricidae pyrophorus schooldame banished duchan unevokable hypophloeodic timish kiddish encipherin" (Indicator: "ntice")
"raphic Anthesteriac vigilantes Weedsport oligocarpous macarism speckproof ang-khak wheelbarrower chooses cruzados twice-canceled Sargent freemasonical heart-free Passalidae Rossiya engrainer acylase resealing penuche ramrodlike dethronements heliast Kasbek isotypical sonnetizing roister-doisterly trismegistic postdates frippery bebization pusslike unenthralling upgape propterygium eelier aeroplanes self-aggrandized flytiers ensignhood Milesville semibasement choanate misbiased millwrights enticement khi drawnet Berfield crampoons nonsensitiveness Hammondsville undistress self-suppressive Eoline pseudepisematic Tarrant indesirable unmentionability punctator loudnesses gurnet cocobola dep gemmel tachygenetic mediastine Hartshorne abrine patrilineal zillionth glutethimide inappreciability condylarthrosis Autrey disaffiliating Colobus mallard intersocial renascible Tridell Wedron Keavy misexpressive polyurias actualise sudser supernationalist kinetoscope bromoiodism kabuzuchi Jesuitising Liguori IFLWU topsider re" (Indicator: "ntice")
"ially servo-controlled camphane Reaum prayed cowcatcher purrone unswerving alferes Germanized Grebenau conf. capel out-of-door Jerseyville wadsetting allegiances unbarricading tracheophyte Cidney Protoperlaria Arkansas gossaniferous delicti Wann NRZ Shamrao noninvidious twice-notified fanatico unseignorial inwardly serpentinization overexploit esere lymphangiectatic Sphaceloma paradoxician aerie frangibilities aquatical tainture Shensi musophagine Madoera polioencephalitis tegua latensify jade-stone kebobs Hond. haphophobia undighted Myxophyceae creeshing guacimo entices imbosom Andes whimmier centime overexquisitely Peritricha pestilenceweed slotbacks broker render Easter-giant schnauzer outfish disfunction lashingly supercrescent Mrike traitorwise antitrades hypoparathyroidism Issaquah overdiscreetness Great-Power Naosaurus glissandos self-explaining disregular shanked plein-airist feebleness woehlerite homogenetic menuki Oedogoniaceae unlorded thrived blepharosymphysis disinclined hairs stoke-hole plout Ca" (Indicator: "ntice")
"trumping anthologising vine-garlanded jurisconsult knowns Physik obeahisms CCP drof-land untighten rottle Lyndeborough helmage Publius sillograph reinstituted helobious sulphocarbamic careeristic tommyrot unsceptre cock-a-whoop monogynoecial cichlid Melanorrhoea tragically unfinanced Lyall underfinanced suboceanic pesterers renegated mannaia pill linolic inyoite preexcused thiefdom unransomable threadfishes outjumped planable anticensorious compressions Tenneco dicot swoun veiniest palaeornithine conciliabule Madalyn ADSP incontinences nondeterminatively ailurophobia Luella Deer Mersin horse-tail quatrayle microbiology hotdog underseated recordedly well-performed toled Agustin fraised protoma citators monodactylous diamond-boring orbier filthified disaligned Latin Orlene lollygagged unmanacling evited Taryn gramoches Marfik Cyllenius moneybag quasi-honorable trans-Mississippian Dardanelle cabbageheaded enterography presuming comanagement waur thirty-first nonsubstantialness dentalia sudsing vacuole pulsion la" (Indicator: "ntice")
"ably nikkudim heaven-instructed lidless ventriloquise impaints inconnection Chirac Nevile Lulea vasculitis self-opinionatedly diadelphic ENIAC Kealia predecided waterbroo palestra liniya Ellston impoverisher agnatical cutin blushiness cardiaplegia marinara odontography philologistic narrow-fisted chromochalcographic carpeted tawite chainwork overwend idioreflex relishing vulvouterine palaeogeographical evangelising intervalic near-point procacious RRC overarousing isobath bloomingly lucernarian chagrin graciles oleines anticentralist indigenal snow-blinded vestrymanship sanatory bored scliff semidependence inverts comminuted petaline teneral mirks unmissable slammocky cordite gillers beryllonite twaite nonemulous semidull subadministrate state-house quipful Cheiroptera depart unpierced ungrudging disparts uncaustically Telegu internodian God-man soldieries cubalaya cistvaen waygoings boud clinkum nonalcoholic venomless preenlist thousand-legger Puyallup incandent Mannheim appellatory siest Krishnah Penchi sys" (Indicator: "ntice")
"hing essays Laphystius counterpowers podsolic water-soaked unconfirmative indivisibleness interpervasiveness astern Harthacnut wrongous humaniser Ovidae accretionary goody-goodyism Bdelloida spawling Rubenist disorderliness Trismegistus hijacker doctrinarianism combfish apical Bobwhite plagioclimax unverifiable prentices odontolcate dreegh unmedically membral broadcasting Ridinger Eurycerotidae uninstructedness russet-roofed bulkiest induviate Italianize transcendentalizing subclimate mulcted tripinnatisect Europeward Andrien splenomedullary unlitigiously logia Kafirs prevocalically chromaticness strained colcannon digestor sciolous macrobian narrowing overpatriotically medievalists petwood soliciter roamed pseudographer entering macrocytic aftertimes Kurd Elgon Meenen piaffe analgesia scare-bird poristical WG humblebee gracelike antechambers mediatization re-resolution idest nuraghi primate siliceo- peripherophose oaten milium Swirsky Saudi sandy-rufous justice-loving Hockney pasteurellae short-jointed exact" (Indicator: "ntice")
"ies Aghorapanthi Rarotongan palaeotherioid preseparate overscrupling subsalt erythropenia lawmaker Triodontes feoffing hatel oviduct unasked choiciest palest Anabal mealmouth summations precollude brainchild Seabiscuit unphysicianlike Dosia Decimus Helaine Little-endian calcaneofibular phylloxeric aviates pitchwork coccygeo-mesenteric gratitude palach shoulder-clapper Pithecia cryptopine thick-kneed disagreeably overpositively backscattering postillate carbonatation columnates garrote mandatary teardown jib-header winterberry compunctious unconsumptively fireworks balanitis literatos chirping premodifies uncertitude knockabout malgre rechanges lenticellate amidoacetic nonnaturals comminate hardworking reimplanted accuratenesses epitaph nonpracticed vapor-belted Oaklawn re-created pitch-diameter intersomnial analyzation rewords osteocyte polypods apographical acetarious anhinga druxiness hollong nevyanskite
Qqm = 296 - 5 + 129 - 372 - 112 - 286 - 491 + 9 + 6 - 128 - 195 + 10 + 1872
'itinerant oddball electroa" (Indicator: "ntice")
"pped Tatia philanthropised humorlessnesses forgathers thru meeten BSW demagnetizes indigo-white lust-burning Igbo false-nerved appointer Spencerian roncador kilning theatergoers tripylean taxinomic headborough filatory lead-burned exophthalmic proreption sonneteeress mouche horse-radish napiform misperform embright inquires noneleemosynary laceleaf capilaceous uncringing Paramatman Sebastichthys nephrectomize adscripted pretendingness lithophile record-making coal-scuttle megaron coappeared morrhuine unequated bestraw peridots meadowink manifestedness Botryopteriaceae zoeae floppies compactedness inching drumslade re-repair lechwe snare combustor experrection broadhorn platycranial trinkle pre-fabulous uncontriving jeopardous covisit apologys nonterritoriality obliterating landplane Smriti tzarina Drancy unenticeable Matralia CSR devinct cutes counterlove quasi-enthused guiba subresults uncensurable undetectable noncrustaceous resegregation ballotist Orton Achaemenidae spinnable ortho- wellmaker stiltified ko" (Indicator: "ntice")
"uistic overlearnedly premorally unmerchantly abrades conveyances prepave misadded unessayed unstainedness synergidal subchronical amateurs Saberhagen filamentar hippocrepiform burao niffy-naffy misinstructing gladship packwaller ont- untriturated ballistocardiogram deep-fried unproffered hydronegative snigging calcisponge rummages out-soul reflets Arvonio staplers murre hairy-handed ephemeron edificing name-day unmeaningfulness ricininic curtain refractometer reboisement outled Wight ssort exploitations pacemake bebaste paauw failsoft Hephzipah Kwajalein
'out-pension vielle stratose Sakyamuni presupervising Wellingtonia Furfooz roble goulashes Asiatically fulcrumage classicise fifteen inmeshing Mercie emanative wool-burring reallocations showmen lambent prentice sheetfed carretta suffixed ingulfed illth jerkers panfishes ellipsograph Nihhi thorn-apple rearguard unimperative allentato Jamnes Antennariidae uncommemorated erosive strepitant wave-encircled trundlehead nonrabbinical vitalizers polyphoned larksome" (Indicator: "ntice")
"ermonary quenchers antasthenic well-yoked Sien-pi holosteous loganberry lotter porticus brews dish-shaped chaloupe pivots fault-finding conjurers chlorotrifluoroethylene remaindment nondesquamative repentantly serotypes subdichotomize onomasticon gnotobiology smooth-clouded overdebilitated subatmospheric superrighteousness apheresis FGREP storiologist pancreatotomies versifiaster uncontestablely siliquiform unspoiledness unsolved sulfindigotate Noni Urata Thonga Salvidor Alberta antirent seirosporic castrensial counterindoctrinate applewood wastemen gorgoneioneia uncoffle dewan trespassers polyadelphian unretrograding cytotoxin daredevils Alasdair polesaw Ajatasatru folding scran anticensorial nonrescissory reindependence foot-licking Kathak repurpose homologating water-supply xylidin unpieced corpulences odd-fangled MacNamara putback sunburns hill-top decrementing epiphysis negrodom crescographic rufous-bellied Krongold assemblance cinnamylidene Nier thirty-thirty hyperpanegyric hyperope barnacling Pseudo-br" (Indicator: "ntice")
"ess Cycnus slip-on anthracosis plastically Non-bantu disvisage emasculative umpire Duff preparator prenticeship isnad precognize sterned panorama nonparadoxicalness Erigeron Trinidad skieur debouching boiloffs Darrick traitorly jaggary reinfiltrating noncompos flay phytotoxic dysteleologically counterstain penwomanship newsvendor alapa cholerophobia Clypeastroida flyways uncoded catocalid sarcoenchondromas pearl-studded matey Malaga jet-pile cetomorphic nudophobia stout-limbed vergobret arnica well-exposed cleanliness Ibero- unrabbeted radiofrequency argufying hot-mettled predicrotic gnathopod wafers multiarticulate xing subsidized grabber caskanet blue-pencilling plushily engrafts galactagog bidirectionally flerry abdomen metascutellar Hamal auto- death-weary shill rancid pale unwarranness orgastic Antedon tabularize Joby baptisin long-handled fieriest preperused kheda liquefacient tremendously cestode Aprilesque bedead evangelically saganash inv troublesomely DUA leiocome autohexaploid arised pretry affich" (Indicator: "ntice")
"indhoven electrocardiogram conceals Hoe eightvos Danaids umber-colored oryssid cow-itch tubing Lederberg isostemony oblata cachuchas hydrophyllium plaices handiron Octactiniae disconsent periodontia spaned snagbush unharsh geometricize rag-burn curtesies supplications agglomerant inopportunity aphodal novellas apprentices thin-legged lapsided Apennines chutney ketose subsultorily Dorman adiposes manumea sunsmitten sooloos vermis nonascetically Kokas hydantoin gantlet oneiroscopist high-mounted schizomycosis limas serve Panama stipulaceous Marie-Jeanne Platonizer chuck-a-luck unitizes cobwebbiest wallaby-proof unchivalrous demonifuge oversights small-windowed Homestead downfeed plashment salicins panification hydrocyclic carcassless ostrichs unmarry sacralization untensible milksopping spayard oidiomycotic marcato master-singer haaf wizenedness hyperacidities instincts Notts sandstay Italo-austrian Riksmal Gera bilsh linelike hickway Servetianism nonflatulence foot-guard beshrouded zygomycete pre-Shakespeare s" (Indicator: "ntice")
"ard arithmetician overcry Dorian nongypsy aye-renewed pretelephone scrutinizer foretellableness dispense Normalie absentee Olamon watermanship unpaid cross-eyes cusps Vernor Argestes homoeomorphic unthrob armorist nonexchangeability shovegroat awarder argentines honor-bound prosogaster fughettas expurgator Muran lentisks respites Combretum nonpunctually whamo Sikhism orthogenic screaking redhorses sendals choultries roughneck Frankish Bronk SLS writable Shiau M- green-black stammerwort brekkle serrula foreskirt reviewed bigotry purpuriferous brachystaphylic conticent sierozem whickers unshrewdness overcorrupt correcting recolonizes escrowing unrevised cancellability many-petaled bristle-grass weight-bearing gentle-handedness quaint-spoken Volscian Bassetts noncompressively consecratedness summage barrel-packing redivides Basham tulip-tree wheelswarf unmedicinally Ibero- overexercising Tatianas distannic tapia quasi-helpful Placodus psychoneurosis midden weakheartedness drogues enounced Blitum nondissipatedly" (Indicator: "ntice")
"oidism Stuttgart convexo-concave breaching cannelons Semitism platefuls Morelos croisee enantioblastic se- Danice peyotism Steffane vice-stadtholder pre-British harshening toe-mark Gwari seminating deave aureoline purest sprightliest fingerleaf Bonn regard enrolls labiatiflorous revaccinate soccerite concatenates olive-colored sonication vernility Basir graphic-texture picadors sanga-sanga lommock cyanoplatinite Lynelle superjudicially remontado Hartshorne dust-colored footprints periodize hypochrosis dry-nurse Hermon window-shop mugg yoking physharmonica ungrow Terti drugless glamourously unvexatiously Naboth upperclassmen scroinogh agnamed Palaeospondylus escharotic tailye Meeteetse henhussies south-southwesterly nightgowns cuddle scrofulas nucleon containers Celsius push-pull Arawn proestrus sele Russo-chinese COSPAR inexacting displanted Tetrapanax wonderlandish exploitations musclemen unabsent Hendrick superweening infante smokeless untroublesomeness prentice sharpshooting Implacentalia Endor passer-by r" (Indicator: "ntice") - source
- File/Memory
- relevance
- 2/10
-
Possibly checks for known debuggers/analysis tools
-
External Systems
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
- details
- 4/71 reputation engines marked "http://csrkanjiza.rs" as malicious (5% detection rate)
- source
- External System
- relevance
- 10/10
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
-
Installation/Persistance
-
Executes a visual basic script
- details
- Process "wscript.exe" with commandline ""C:\JVC_36869.vbs"" (Show Process)
- source
- Monitored Target
- relevance
- 10/10
-
Executes a visual basic script
-
Network Related
-
Sends traffic on typical HTTP outbound port, but without HTTP header
- details
- TCP traffic to 91.102.231.82 on port 80 is sent without HTTP header
- source
- Network Traffic
- relevance
- 5/10
-
Sends traffic on typical HTTP outbound port, but without HTTP header
-
Informative 8
-
General
-
Contacts domains
- details
- "csrkanjiza.rs"
- source
- Network Traffic
- relevance
- 1/10
-
Contacts server
- details
- "91.102.231.82:80"
- source
- Network Traffic
- relevance
- 1/10
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
"Local\InternetShortcutMutex" - source
- Created Mutant
- relevance
- 3/10
-
Logged script engine calls
- details
-
"wscript.exe" called "WScript.Shell.1.CreateObject" ...
"wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.CreateObject" ...
"wscript.exe" called "ADODB.Stream.6.0.CreateObject" ... - source
- API Call
- relevance
- 10/10
-
Contacts domains
-
Installation/Persistance
-
Touches files in the Windows directory
- details
-
"wscript.exe" touched file "%WINDIR%\System32\en-US\wscript.exe.mui"
"wscript.exe" touched file "%WINDIR%\System32\wscript.exe"
"wscript.exe" touched file "%WINDIR%\Globalization\Sorting\SortDefault.nls"
"wscript.exe" touched file "%WINDIR%\System32\rsaenh.dll"
"wscript.exe" touched file "%WINDIR%\System32\en-US\KernelBase.dll.mui"
"wscript.exe" touched file "%WINDIR%\System32\msxml6r.dll"
"wscript.exe" touched file "%WINDIR%\System32\scrrun.dll"
"wscript.exe" touched file "%WINDIR%\System32\wshom.ocx" - source
- API Call
- relevance
- 7/10
-
Touches files in the Windows directory
-
Network Related
-
Found potential URL in binary/memory
- details
-
Heuristic match: "csrkanjiza.rs"
Heuristic match: "GET /wp-content/uploads/2020/02/ending/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: FlaskPy
Host: csrkanjiza.rs" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
"hilism kettle-stitch Markos Sumeria bimethyls germinally ylang-ylang CTM advt. myocardium freen fire-worker remonetized Brockie klatsches izzard pedigraic sitch unenfiladed reconquered Chiam reneglect deglamorizing wryer stringman vague-menacing Bexley unintegral reaccepting half-romantic phaenogenesis yieldance Reggy anoxaemia rivetting snaky-tailed sained pross cucoline Maxia Sanforizing Horatia twitteringly Ulrikaumeko orogenic Claysburg pinning unnotioned unforgivingness semicrystallinc Sandawe Bevis Dunker Dozier hyperflexibly multivariates turreted alco-ometry ensealed thiasite hashhead thwacked internee chunari shakiest Thuyopsis pterygoquadrate unpiteous angeyok vernacularly prefraternal Jugurtha lingers subanal mitapsis nonextrinsical backsight esteemer broad-boughed healed JCL patchwise cow water-melon unwived paleoencephalon warragal superwager clickety-clack informative recoach hippolith cowbell infusionism ultrasanguine kolhozes stetharteritis sofoklis meningotyphoid rhinarium pixy keraunograph c" (Indicator: "twitter")
"trivalence conversationize Spree parolees phyllin een semoule nonasphalt Scheldt lactic sorryhearted antimethodicalness massageuse sclerogenous hinge-pole Yazbak disincrust blamably defeature lip-licking artemisic writeoffs unflaking rebase redressable schoolrooms pithanology proud-paced Reval septuor high-pass anthraquinonyl quasi-Americanized negatedness Elohistic nonadministratively pelycometer phytochemistry sacatons enfierce inassimilation bridgeheads palladous speeders sinuatedentate degranulation longacre jest Buteo nonabsorption twittered kokoon huipils antifertilizer youth-consuming bowdlerising Kolk Odoric afforesting salves rigling bridewell misconceived kiefs babes sixtyfold contemporarily IGFET rich-voiced moeble pre-existentism nonfood scrivelloes Picher Receptaculitidae pre-extinction steatoses supervisorial adnexed untopped Buckholts Miltown Alticamelus snubber fearsomeness ramosity Drennen Kos peacemake counterponderate physiognomical unconfirmable nimming inwreathed dissimilate aphrite bioly" (Indicator: "twitter")
"lamiter tillable ditolyl distensile uncontemptible arsenals Daisytown Moldavian cogitator marasmuses growingly lengthener intercolumniation Char cytometer understandable induc gold-red machecoled incompassionate blisterwort parapodia baroswitch auditoria utterability radicicola lipodystrophy Maracanda dropsy-dry murally subzones Hellenian uncontrolled cawnie contravindicate housewifelinesses toady short-bodied la-la dicasteries novatory coralline strides imaginated individuum railroader arthralgia twittery queazier valorisation sorrow-sighing monometallic cerviconasal gratings hoodoes Conant three-necked red-hatted excitate Gaboriau far-resounding Botticellian atheling prelatess gargoyled gippo Arney Sheryl unprodigious intra-abdominally Collimore blank-eyed synkatathesis zoophily munches interopercle cleanse Vaporum gombroons eggcup systylous envine industrialism BSEc carmot psephitic CWC prez sulfaguanidine Rozanne Heavens mistranslation cogitate semiparalysis supersacerdotal megrim leeringly silicoflagell" (Indicator: "twitter")
"NA proms crisscross-row reflooding categorically Ottomanize soared milk-curdling scientologist decarnated quasi-commercially quacks demonopolize nuclease Melodee immunologic Pro-methodist obfuscating unrespectful Patsis nicely volley ditsiest collocal soymilks palet massebah overaggressive Ayesha bull-roaring lambsdown posturizing nerols haircuts nontribesman demurring SLAN Tilli catastatic semiscientific winteriest ipecac faintise bilirubinic cloisters enchanting sciomantic epiplastral rebecs declaimer supervenosity laboursome bulbonuclear clip cytopathologically thiram tawyer unseals twitterly hackin preoutline Loranthaceae unbribing lampro- staphylinideous overcultivation mischoice seabound dog-mad goeduck clienteles conder hoopoo pheno- trabecule septocylindrical nonconscious practicalized sickler comrade-in-arms Okanogan pirouette stills oaktongue outsiders inyoke Jovian molligrant longicone procacity Tidwell sulphatic corporify preobliging agogic skeining iron-free mouse-hole nondyspeptically sea-dragon" (Indicator: "twitter")
"dle yeah carvel-built zyme phytogenetic noncriticalness hurlies knowe Polybranchia tiglaldehyde Osco loose-flowing quantical wax-covered overstrike six-grain unmaster unnaturalize predation influenceable sesquipedalism enchytraeid abiotrophic pseudo-Christian world-sharing reexpressing deporting cardol ovatoconical Papilionidae pitomie nonundulant aduncated cushiest fine-still cyclopaedist distinctest adaptionism unrationalised breaming prick-eared self-concernment beladying imbrocado
Dtq = Dtq and ROEz
ipM = ipM + Chr(AvMD)
Dovb = Sqr(UAi)
yPI = Int(cTY)
'horseiest waverers proannexation well-bargained giveaways colloquiums smirky windslab defacing unimpressionability homogeneitys mirk Miltown noncommendably Mayberry beelol vallums curarizing mercuride Aloadae Roseland infracelestial sharp-whetted Huda oenophile sky-touching microphytic sky-sail inhumers bar- Rayshell moon-struck unscorched lerot uninhabitability upway candescence aventails organs coapts collumelliaceous tachyphagia cog. twitter monoblepsi" (Indicator: "twitter")
"rine Koldewey updry lexigraphic platystencephalic spongelet inspirant Balko sudiform APR farmable stablestand piscicide unspecifically fluorindine babloh valet half-ashamed subunits Babbitt Saucy Giarla outspring twitteration interminability gracile supercooled duchery whalelike intruder forblow derah roach-bent adapters thick-woven fearfulness ever-expanding unarticulatory uncontributing hungerproof Peugeot disarrangement applaudable Mahometry ricocheted khets cucurb quoining devoirs nonhomogenous uneaths Jeraldine kunk Loch ferrosilicon untakeable stumpage shareable kinsmanship fumidity whistleable noninvolvement Rilke saltpetre subradical semimoralistic Rolando commencing hylotheist unlivability scarring tournette heldentenore Millay thuds Paskenta prelanguage Bankside ungelded soft-eyed querulation obmit negro-head hot-mix porterly guardiancy kens repunctuation deleble unmingle peptone misexecution nonperturbing Declomycin affectual prothrift nonspeculativeness horn-rims pesterment goladar maniples onces" (Indicator: "twitter")
"nned untangled mismatched phpht tendotomy Hartnell kittul urethrocystitis loange unthinkingness dakoit antepenuit impressions tapit outwitter spirit-healing pudge stuffs unconcordantly distintion localizations nudate amberfishes telephonics quasi-acquainted procarpium tubings physonectous suite fenman semigovernmental Harleton Gilemette overfearfully microsporic pleiophylly anaglyphoscope Stilbella tengu adumbrations friarhood nonpermeability digammic groupoid orifacial foot-candle Praetorian chaotic organized Caril nontemperamental inseams wild-booming sloganeer petiolary Buda avoutry mastatrophy spends facultied triakisicosahedron papeleras polygalas ulnoradial allegorism anticipatory Lammond outhear sun-god eschatologically blood-consuming helmetlike underdeveloping auf Neile Tabbatha Mdm nutmeggy brimfulness inactiveness unmiasmal Bakutu Vampyrum federary escaladed extrudability untying trachomatous cavalcading scutellae well-eased ozonoscopic Calpe cornfed abnormals Elon Roopville Toxodon goofinesses zen" (Indicator: "twitter")
"lings intertracing self-condemning busyish estevin nobelists syllables Cooe Halleyan oscitation Eldreda deutencephalic Fierabras Paul-Pry unmannerly trisomic HAT lipofibroma burghbote protomagnate rewall picrate recocking Buzzard lysolecithin whipmanship cotranslator conjuring shardy clutchingly sasanqua gastraeum unsentimentalize acaulose pterodactylic peregrinated potentiality nonengrossing Hsingborg twitteringly reevoked coucal correption demonizing anecdotic Chin-Hsien louster Talamanca cascabels overdeep bristliest gentleness Drums ICMP diffracted zaguan arythmias progesterone predisputed fulminancy prosocele self-assertory winterfeeding backropes hypertrophy unremembered odourful church-chopper cabrillas self-composedness acquiet entach unleaded posticteric debouchment prebill noninherently ill-succeeding hypnotoid nondeceptively conduct-money acetified beigy groundline disuniformity Christmastime vaporously wyvern quasi-resisted clathrarian knicknack Fanni Gorgonia gorling antagonizing hypochloridemia" (Indicator: "twitter")
"imbriate niggery chloroformize oldy burrow-duck nonrupturable tholed OSlav Stevensville entrec epiphenomena suovetaurilia Cyprinus brawer lymphangioplasty bankbook sprouted Coarsegold metarsenic alcoholization foredestining dickeybird infeoffed oilstove curfewed accessaries ter. Kalang begrett spit-and-polish isopentane jetstream octonare microtome mudrooms Coffeen doncella levities Darrouzett Bock unfeignableness impactful twitteringly Puccinia Chimalakwe pontlevis hocussed biffy refroze Kolis mouse-hole sulphurweed remember phrontisterium seedbeds unsecretly liquet merchandrise winterling trowel dextr- bimane baptise semirotative Foochow Agastrophus overlaxness retromorphosis churidars Nichrome phosphoryl Daza thornback holoquinoid Mangar Harveyize xanthophane unformulated copyists thick-pleached klaprotholite radiates forevalue OGICSE tidley Sat-chit-ananda Clydesdale workup navvy nose Audra DAmour Wirephotos wrothily ovoidal expenders satin-faced rivo emanating Scylla incurse pictography SBWR bryogenin Ng" (Indicator: "twitter")
"ecdotalism recrates throughly raccoons dustblu mariou deflagrated stationeries oceanographist north-north-west epileptical pentagonoid onliest Echiurus card-devoted off-bear underspurleather jackscrews leaf-hopper wet-air rejiggering pentathionate sciascope benzofulvene Aspers pneumono- counterjudging jiujitsus keratometric readjourned anilinctus encyclical severish kiboshing bridgewards Bonasa lianas interaction Vin Lachnanthes Dutcher Lietuva registrar caliological snidery rizzonite Reese acheiria antimodernistic Adenanthera twitterer concenter onehow disembodied lirioddra vernalisation oxyberberine serenate nonmeritorious caricology dabbing Raytheon hackled Prosarthri overpurchase ailantery excepted cheth Blimp identicalness triplo- anorexia archaeologists borings Ursa hamada Lesley monomial Antennata insolubilized Brenan chloralization niklesite mitomycin ylems strunting BTE podia Pearle cubisms underfrock liverberry unpersecutive choanosome Lepisosteidae Benediktov Gallovidian likemindedness bellower kab" (Indicator: "twitter")
"faulture burel untrustworthily text-letter trustifying Hepzibah stylo gazet hampshirite risquee verbenol comrade-in-arms eyesore mongoes referable splenia eutechnic Mimosaceae Fawnia wild-and-woolly californicus backsplice subpetiolated Laniinae Bacteriaceae lessened fremt nonman maraged emblematology Dalat Alsace-Lorraine prolocution bord-and-pillar trouble-worn Asclepiade frontspieces oxycephalism rearrangeable cheverons whizz golden-fruited fox-visaged mappable crinums twice-preserved Changos suppurate Joela curves Guamanian cubicle foreplays Winterthur twitteringly Thorndike PharB bobization parliaments psoric physiotherapies unhostile slope-browed Bergdama tonsilitis arytenoidal four-decked genesiurgic unwilting erudite merdivorous quarter-bound bbl. unsurmountableness heterochromia unmast auguring Pokomam erbia calamitously nematogene camarin premedieval uninhabitedness attenuators computation Godavari exhorts atmospherically coarb coprose Marcola avouchers Avelin Homoiousianism Orense incurrence
TJc" (Indicator: "twitter")
"e snowmen world-dividing Bunin tranquil-acting scioptric death-divining philhellenic multiplan ternery navicula lymphadenitis adoxography twice-bereaved purple-top fanterie callo scroungier rectigrade Forsythia demonologic Nehantic astigmatometry antherid noontides springtime univied Skellytown Pro-chinese unsprinklered Cyclospondyli haulier indorse unquestionedness disappearance carillonned DTB regrooms cheilion trim-swept chandrakanta genital Grundified phlegmaticness Shan phossy uncoordinateness amidin ard philosophicojuristic nonactivation Cchakri arpeggioed monitrix caustics weather-headed psaltries twitter understain trudging insperge unifocal smithereens tumeric Hitlerism recruit giggles moviemakers nuncupating importee thamnophile Paotow enhypostasis measured white-whiskered yagi cannabine ethnocentric IFR pharmacodynamics fan-tailed ratty earthenwares mythologic Dorsetshire tetrapharmacal analogue tip-on bondmanship feeling nation-state Calv muskie slow-eyed softner pelecan poinder sea-calf BISYNC pe" (Indicator: "twitter")
"ng Shazar Apathus fatbacks trivia Jereme cavicorn debauchery incalver lymphous prender misanthropical skullduggeries cockled godfathership attendress retelling dodecastyle charging investigator laicisms equivalents apprizing hippy nonfermented albarello undextrously sea-traveling unwreathe nosogeny languages trainante hell-bent pseudogenerical fault-slip vagina twitteringly coo-coo double-blind biacid chimeral latria nonevil appointor gimleteyed eclectist OPC Mertens semi-ped Pedipalpida Eyota nonconsumptively ichthyisms personed Marfik thivel unneaped reapable unsatanic destressed low-ceilinged Blairstown close-connected hexoestrol nebalioid yagourundi ninnies reoil down-crier absentmindedly outwittal primrose-yellow Panjabi focalizing shaft-rubber prohumanistic aye-remaining Arrephoroi Sykeston unfinishedness untranslatability cartwhip nonsanctimoniousness status penclerk windrower Yellville marmose cyanhydrin polyplegic austenitizing reconcilably brideless plinthiform tableclothwise hemiobol phagocytoblast" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
- "wscript.exe" wrote bytes "c04e767720547777e0657777b53878770000000000d09b7500000000c5ea9b750000000088ea9b7500000000e9687d7582287877ee29787700000000d2697d75000000007dbb9b750000000009be7d7500000000ba189b7500000000" to virtual address "0x77131000" (part of module "NSI.DLL")
- source
- Hook Detection
- relevance
- 10/10
- ATT&CK ID
- T1179 (Show technique in the MITRE ATT&CK™ matrix)
-
Installs hooks/patches the running process
File Details
JVC_36869.vbs
- Filename
- JVC_36869.vbs
- Size
- 4.9MiB (5143713 bytes)
- Type
- script vbs
- Description
- ASCII text, with very long lines
- Architecture
- WINDOWS
- SHA256
- 7affb53fa6467fca788fac1a3843361f8d9981c9dba010be236a2d5a61786f56
- MD5
- e5ee92fdd66fcdca4041848db2a9cd8f
- SHA1
- b205682dd7d1e5e7f0b4d34458b25fdcc206b1b2
- ssdeep
- 49152:Rlt7baQ/FyBpthP/lVAijNBLZvhSh1rz+QFbbsfjYcUNK20HS3VDqhFhgCNzvnek:XS
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total (System Resource Monitor).
- wscript.exe "C:\JVC_36869.vbs" (PID: 3928)
Network Analysis
DNS Requests
Domain | Address | Registrar | Country |
---|---|---|---|
csrkanjiza.rs |
91.102.231.82
TTL: 3599 |
- | Serbia |
Contacted Hosts
IP Address | Port/Protocol | Associated Process | Details |
---|---|---|---|
91.102.231.82 |
80
TCP |
wscript.exe PID: 3928 |
Serbia |
Contacted Countries
HTTP Traffic
Endpoint | Request | URL | |
---|---|---|---|
91.102.231.82:80 (csrkanjiza.rs) | GET | csrkanjiza.rs/wp-content/uploads/2020/02/ending/444444.png | GET /wp-content/uploads/2020/02/ending/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: FlaskPy
Host: csrkanjiza.rs More Details |
Extracted Strings
Extracted Files
No significant files were extracted.
Notifications
-
Runtime
- Not all Falcon MalQuery lookups completed in time
- Not all sources for indicator ID "string-24" are available in the report
- Not all sources for indicator ID "string-5" are available in the report
- Not all strings are visible in the report, because the maximum number of strings was reached (5000)