JVC_47104.vbs
This report is generated from a file or URL submitted to this webservice on February 14th 2020 18:53:35 (UTC)
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
Risk Assessment
- Network Behavior
- Contacts 1 domain and 1 host. View all details
MITRE ATT&CK™ Techniques Detection
Additional Context
Related Sandbox Artifacts
- Associated SHA256s
- 41bbf4850fe565eb0dc809193dc79310ef06488ed9920a2cee1ac32b241c832d
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Suspicious Indicators 4
-
Anti-Reverse Engineering
-
Possibly checks for known debuggers/analysis tools
- details
-
"manic jongleur outsonet fool-large populi ordinant champaca enticed forereading greenly resider rhamnoses flatcaps oversour attains cinnamaldehyde nondelegate indissolubility arnotta midwifed heldentenore fore-sail residuum semisegment Sotadic jacket Irmgard pseudoaristocratically maskanonge racecourses triens presumption conventioneer divertissement transmigrating dentate-sinuate Tombean syenogabbro too-hectic tachistoscopically anticonformist pommage gonal guze indemnify rhombohedral doch-an-dorroch apostasy gemmier clubroot deviations outstudies Goethian gargler Hashimoto carpocerite trichonotid papayan costopleural serglobulin bobber wiselier hairweaver felo-de-se copses unhairs Klamaths twice-lengthened millilitre antiperistasis synchronical galvanothermy painches doyst fifty-ninth exestuate DCT antholysis advowry radiotelephones latently self-communion heteroproteide tranqs noncondonation Bard wipstock sharpshooting techniques heptarchy graphotypic munitioner repartition Hunan othaematoma eastward epile" (Indicator: "ntice")
"nded daintier mycelia disnumber rosemaling intertraffic underbitten Boreus Cony juniper cimbaloms nonreducibility manganostibiite palliatively Bayeau Cucujidae silicifies bidonville heavies agramed outrogued freshet dew-drenched light-rooted preemotionally ostrei- demurrable split-lift emersion caretook Anti-mohammedan philandered Euphemiah phosphates sops-in-wine milliard casquetel Giesser unforthright knappers leader goings-over sheet-fed Grantiidae bristlemouth kipperer volata kibes phenolics BES Sauerbraten terchloride incriminated condititivia primordiate octaemeron etang Faunia enticer labellate Nycteribiidae demonlike backflowing faradisation reawakenings schizostele xenelasy villatic Batrachophidia enamorment undertakable clear-stemmed illiberalized allegoricalness unpresumably Nor. Isenland esophagoptosis multiparient mastermind untranspassable phlebalgia blandation green-grown never-failing kamansi cloggiest Waggumbura presuspiciousness woodpiles unhappy vagabond unstillness diuron minibudget arenul" (Indicator: "ntice")
"unidealism ponticellos way-out invocative caraway sociologist subpilose dissert methyldopa uncontemningly unironical hardships patrocliny stibious quinse tam-oshanter ultraconservatives circumtabular TAS PEDir sarsparilla cloisters Bourne awless guayacan diaphanometric unfledged postludium carapaxes unbigotedness re-expel grandrelle hypothesis heptarchies mesenteronic Belamcanda sage-leaf inapprehensive antinodal trichlorethylenes aborts saloonkeep yokewise unfactualness Limbu galbulus Kapor nitromagnesite free-soiler co-operationist churchshot cacti claroes spelunkers antispermotoxin McEwensville bromcresol pelletize organist amorphinism prex overclose earlships pennywise cashes Hollandia stream-drive acro- energid bosoms inconsideration idiothermous buttressless phyllodination nonobservation ambrettolide skinfuls Palaung gletty rewashes applicable Forli scrappet overstimulatively ejidos superseriousness nonsatirizing Steep sulphohaloid unfluted Weyden businessmen subelliptical spaded lugeing solemnity cn-" (Indicator: "ntice")
"aling ducally wouldnt allemontite atter Basiliscus schizopodal ugly-eyed footsore sapiency codewords homogenetically collophanite castigates allodification Tusayan inductors plumbojarosite placating excisemanship GHZ ostracode unbewitched unyoked blackthorn meshy unquestioning quasi-unanimously run-of-mine oxypurine criticaster queensberry Ammonitess velation accordatura digamies nothus remiges Lynnville prezonal self-stabilized Drugge yapons cyanates chiarooscuros phlegmatically stereospecificity archaeolater waspier baitylos administratorship blk prosopically departs Anthracotheriidae isolated rigescent spavindy preserved paly-bendy prestate twice-humbled EDP ytterite unbewilder kuttaur disdub gonaduct subpostscript sneer implorable postcommissure linguipotence expeditiousness Domremy-la-Pucelle lieberkuhn bodywise ponja catechins chalazas diffusiveness epiphyseolysis enticements ladron well-filed nitrite Saulteur tying inducible hypermetropic testbed last-born keraunography galvanotonic behooving braciole" (Indicator: "ntice")
"unternarrative haircloth Oiltrough archisupreme drone overlogical ecbolics faconne home-sick perhydroanthracene stion hunger-pressed cowbird epicier counterbond expiscator nonarrogancy Pu-yi superbelievableness conventionalizes myriophyllite aftaba psychotherapeutically stego- ammocoetes unmiters bescribble repondez wastement paranephritic auricularias hylology Clarendon nonsalvation molluscicide twice-forgotten greenockite out-of-course unclassify cancrinite synrhabdosome Folberth gunstocker self-duplicating damaskine mezzo duodecillion Pontypridd proexamination Vogeley anticentralist propine tarri nongentile Baduhenna peachier wracking bedlamp biunique parapteral quaky sticker-in sun-projected tarnlike slaggier Scutellaria ponytails vaned phrenitic headkerchief shied groow tachometers detd pulpwood curfews nubiform dissemblies mushier fictional accelerando swordsmanship low-downer guileless capsuliform prattlement counterconditioning tetter phyllophorous gadinine conquerors pentit Trelew policemanish dishmo" (Indicator: "ntice")
"Tupi-Guarani unreclaimed archigonocyte pavane cabbage benting bicuspid didies crotched definitise satelloid enchiridion specimens Yesima Coryphasia perimetrium asparagic cesium unrepressive exposited saddlemaker Dalat geobotany schillers homemakings inextension toothaching mediateness equilibrious hypogenetic kagu fathogram VMSP tanguin pompons bawneen vers compesce Dille calelectricity Paxico Chromidae Palisades ecotypic trampolines pylorectomies xiphiplastron infective jugulated aspidinol reflectometer now animates outsteal mope thoracicohumeral unreformative stockpot unexperimentally seminarys dockhead inquiration seven-line affectless nonemulousness overlong raw-faced I-ship bounciness dacha Naha hydrophiloid disendowment nudicaulous wayfaring-tree arroyo Siphoniata radiological assn. undermarshalman myelophthisis unrecordable combinement underconsuming unattired Tumboa reseeded Elroy volhynite tautoousian self-caused sociologies Echeneis globe-trotting Spinozist spottiest AIH denticete superegos downgon" (Indicator: "ntice")
"noir burthens SOL Deadwood sleaves carcinemia anaschistic stipel nonoligarchic roofage Smolensk Marprelate acids congregated carpetbaggery amber-weeping Krithia deaf-eared overfeel Elysburg dianoetic parti-coloured unconscionability mezzotinted eutaxies dying UEC intersects Aidoneus semireflexive milliamperemeter daggles hydrocarbonous nonreasoning slop-molded quasi-continually Procellarum markkas unviolated nonlyrical recrew Tyndale inteind Camassia Marrakesh disgospel Siletz sanjeev trochometer wracked resultant Hypergon giunta taxy ore-mining pukka then-clause disconformity uptightness O.S.F. throw-crook anticensorial deregister cobber Mesics mophead gossamers Bahner false-tongued sea-eagle penumbral Khayyam Baynebridge prebetrothal scapegoats Corallium lixiviating Sev cinchonaceous mesothelioma histotherapist plexuses septicide unartfulness paralytica ureameter katmon appendorontgenography quadrifocal study-bred nonpinaceous unthaw hallower billycan dioeciously preimpart larks hurtable lammock PWB trigoni" (Indicator: "ntice")
"es subglenoid speak Negrophobe quasi-extraterritorially locusts procentralization timothies can-sterilizing lumber-pie scarry mayhemmed trocha Chiogenes near-miss quomodo eschar thalamia quey Ahwaz simpletonianism invigilating noncombustive green-haired cellaret bespice rocketry lecture-demonstration Rheinlander hopsacks opportuneless burglars supranaturalistic Kancler Causey detract lace-fronted antimonite demolitionist jackals tablemount Valletta skiers straightedge millworks trophocyte sail-carrying simulating replotment relisher galeproof Vorspeise Travax attenuator ammoniac vandalism stultiloquence whip-ended hematoscopy barbicel bureau unphotographable reformats undifferential Turners deadhand pupillar morticer trithiocarbonate kellies oidwlfe close-in neuroglioma nonattachment mansion cleidohyoid ureterolithiasis Gass atropal lenticellate unmoral whitecomb unordinariness kilning Martel hedgers Cupressinoxylon Sinophile defunctionalize guttiferous sidero- Lemmueu drawbars prionodesmaceous lameness hexyl" (Indicator: "ntice")
"uloma Itonama papism self-disgrace haemoglobinuria morph- oarweed terr. doveling disvaluation rude-spokenrude-spun pedalier harvestable nonfidelity embowelment palm-tree branchful unhorizontally bemuddled filmish Brieux agos undecayed perturbator quis parrotlike treadplate pneumocentesis tattiness Fabriane jumbucks beneme saccharonate treatyless monorchidism overproportion marble-calm bringers tetragenous well-trimmed steam-cleaned Olema donatary tellee newsmagazines spheroplast direx allantoidian counter-draw miscited beaverlike Agaz Saxapahaw undisposedness Wallie transubstantiatively zorils eclipsises workman Spragueville faithlessnesses LLC Keokee exonuclease kindreds postclavicula afaced pinnacle unpictured amoving unmistakableness bendable autozooid pinacocyte statically giftbook microtypical chills Goalundo unporousness ad-libbing paracresol roselike hasped autoplasties pansies Viereck seamsters anticeremoniously madapolan preocular unextinguishably pearl-gemmed gobony ungarter Chteauroux flockier Beor" (Indicator: "ntice")
"ntrusted verisimilarly Achlamydeae defogger lavaliers Benkulen charer tile-covered ablatival uncorseted incompletableness limacelle Kish quizzers phacoscope kryoliths bandhook carders stepsons bathed withoutwards outslick welfaring preroyalty scientificoreligious anticeremoniously reprint Katemcy adherer mozzette Anglicization hearkened Pipilo gether Gallinulinae gamous telelectroscope mammillar somniloquous aurei Moslemite stagnize holidays downpours weirdlessness detrain Periclymenus funiform patagia engraving abandum Akili cutups araneology fossified urethral angiolith dowily Celtism Segre wide-circling quadrature bepepper NBA scratchily Gibbi functionals melolonthid UK annuitants Keefe permanence Northampton lilacs salpingectomy summerroom omnivalous substantivity reannexing periostea Neronian misaccent scare-devil hamirostrate pharmacists cloud-crammed Merryville teslas sympatric Xanthisma Bourgogne twice-darned underhousemaid glancer frill-like moireing foeffment imprests mesonephritic deoxidization cru" (Indicator: "ntice")
"ngirese Slavo-lithuanian meader streeked Vassily Paradoxurus pathomimesis catatony anoxaemia turtle-footed demirelief ingluvies squatly diphthongia Ascaridae hard-hat jellifying Joh severable psychologists white-lie strength Frieda alkargen well-speaking Malorie schrank jenneting trisulphoxide myectopia prepubertally Hyrcan fullmouthedly tirralirra futzes retraversing valves Ersar fire-quenching Wappato tassels alphabets bitted nonacid pretty-pretty pleurohepatitis gravitational commencer enticeable nonulcerousness nonsensitization rehabilitations Bullville Mongoyo chebog inaurate ugly-looking unseductively stormiest paideutics aerocurve zymogenic jib-header barcaroles nontypographic toea acology minious taker-off slur composition abolitionists rusticism mid-central astrut handleless uttering Tippecanoe filings penalising unapprovable Protoblattoidea telectrograph noniridescent wearier bagnios premortuary unsound subjugates Selfridge sanctionable myringotomy extra- lumens prevocalic preaggravated FC Zorana Ga" (Indicator: "ntice")
"r sicklier marquisess ichthyopsid neurogastric unbadgered modder methionic trans-Uralian square-towered six-wheel profitability cephalon mid-century sloe-blue azeotropy tamarin azureness buckjump steamy gumshoeing canopy brubru loafing intromitted Siffre twice-accused ovenbird unprovincially cancerigenic unstrafed lift-off frustums connectible semiglazed glali unplagiarized Afzelia Idalou oligopsony fackings endsweep Amphiaraus avers subprovince pre-effectual loosest gaps Tambookie decentralizes pejorative unprospective scapulars awater corrober Fl. plastometer malorganization unenacted awakened Steele circulatable plagiocephalism very-high-frequency impression coxiest stourliness ostracizes semiservile Pan-anglican unadornment oscules palatality onflow non-Episcopalian half-noble proparoxytone phooka vocatives outstating hibernacle antiplatelet overnormalize brouhaha disminister uninforming pomatum enticements immortalised sarcolactic edelweiss exocyclic postbulbar intertraded reinquire arrhenoid phyllodinou" (Indicator: "ntice")
"se re-embark pamphletary Tutankhamun quart Aretina reitemize glaciologists discomfiting cosher reprobatively world-waited unconvincingly earthier prenticed attachable Egor carpetbag nonconjecturable electrosynthesis Gastraeadae unprescient SISCOM Stamford fewest bunglingly sloucher handinesses Ficoideae pseudoancestrally ferns nonart spring-made round-heart air-swallowing bergall tingibility thankful philatelists decussated Yang undistinctly sneezers sheerly prefearfully wing-hoofed weekends skelping nonparliamentary gangliasthenia splenology thoracoabdominal venereological renullification Chemosh fallotomy Levon Zulu chloroamine fulgor ecliptical cacothesis move Eilshemius speleologist Platonicalness half-reluctant wheatbird potheads awe-struck paraglenal appetent begulfing hurroo quarter-yearly ippi-appa evanesces Rudistae Rhyner Aladdinize subrogation disbody exemplifies ambulant bug-eyes liked stoicalness glyconeogenetic Robards miscreance epanalepsis overtamely rest-giving Ashir spleens fughette metallot" (Indicator: "ntice")
"overtreatment serpette counterdemonstration Fuerteventura selects unwedgeable urbanized ensearch quasi-beneficial overspilt refortified undissimulated colluviums adipinic infraradular Itnez algologies Ashford Actaeaceae bloodwood flax-sick paucinervate unprecedentedness stepbairn extracurriculum brushpopper fucate anticeremonious two-masted classifier hyperaltruism columbic Pellan infante Chiron beshrouding semese panagiarion humored gorged befoulment nonrupture shegetz swop sixty-ninth struggler Squaloidei well-selling transposed unbeneficial vanner cogracious valew inamorato oxalacetic unemphasizing precompensated cardiopneumograph accompaniments Tahuya corbiestep antiprelatist Bro gear-cutting obfuscating engirdles downtimes gadbush annulling nonsolids mapo Hachmin Hindenburg re-refer strabismies Kermanshah scintillantly lute-playing fistical kirsches Scolopendrium interfilamentar piarhaemic fencelike plutocratic magneta riotry unshouted convincedness superingenuity introthoracic ammonionitrate diphthongal" (Indicator: "ntice")
"ture weatherward ahaunch itchless Catalonia Daytona ill-wrought Adara culminatations nursegirl state-ruling gluing-off intermolecularly Grundyism majoritarianism reddish-white Agaces applicative Dzyubin daubreelite parabases maldistribution warless tacamahack usuress cyberneticist Cioffred finagled overstrongness sucklings unneutralize Orneus vamps doubtlessness lax-flowered picaninny coprophagan nonidiomatical kiloliter graminology Gruyere minute nonhazardousness patchhead labioglossopharyngeal re-entice miscensure pricey hasheesh Nyctipithecinae precontinental INOC ranli masochists jounciest tourism fusile reingratiate vituperate lowsin apeptic telpath Buick Seahurst unconsonantly fideicommissumissa walies imbrown unmuffling dispauper federatist vagabondismus Halteridium URC petarding precolluding novitial Spicer blandishes Sasak brutified Sept. spectrous mammilloplasty idiomaticalness summist superimposition somn- Stillmann amphicarpous Listerism injection-gneiss aspide representationalist Photinianism dai" (Indicator: "ntice")
"kum sororicide delectating intros thermotelephonic HLHSR flori- ripieno pledgeors Latinise gramophonically unabashed Basellaceae dorsad BAcc perispomena kowtow recursing stonifiable genetous marbliest byganging timber-headed seviches populating spousal exodontic ozonic Pass rabbet-shaped northlight rich-attired birds-nest Solberg corbeille pucka lexicostatistics Lutyens Afghani nick-nack gimcracks rivieras passegarde regarrison vaginectomy monticellite re-rehearsal self-gratulatory nonstress matters hobbledehoyhood platybrachycephalous auxology boozed Crescentia curve-fruited vizier unreverently epithalamial orthotropy centronucleus Moschinae disgorged prooflike crawlspace bricole halfbeaks anteambulate chainwale Sejm Megalosaurus odograph Botvinnik Wolf unallied megadontism pawnable rakshasa theomastix praesenti redeploy factualness Macy becrusted mothballing hyperdolichocephaly Mazatec conferruminate gleamed engorgement leather-jacket continuation unguttural lunkheaded shammocking transmute poolwort GeolE b" (Indicator: "ntice")
"ostland electrolyte aromatophor Sorbish keywords tableted ill-definedness alethiologic intaria thenceward Bridey Anukit Massasoit virger glaciarium paddled versable untrespassing excommunicator enchants PAO patzers entomical bryozoum rakees extravaginal increasable fence-sitter immutate cromlechs subsinuous unright Vinia intrashop microinstruction contrefort provinculum nine-mile entapophysis persimmons reptatory chinotoxine unreliable UTC thrashel anticentralism Chambry unexcellent self-indulgently climatologically pendulous andante Surakarta nonspiritually bull-man overgeniality Bristo Matejka unwarrantable chasms Neowashingtonia atwain balled unauditioned metastigmate scamming interjacency foyer thermopleion harrowingness Bacchae cattishly tenoned SCAN Holna unprinceliness nontransmission postmundane Bucyrus overroasted superfluidity incriminating rhodolite Spartanhood carbonadoing Kreutzer Kahoka diiamb Quintius cibol unbeaten aeroplaner bigotries totten reappoint nonparticipation undiaphanousness ALBO fl" (Indicator: "ntice")
"lkoes groans herbivority Alexandro parsonhood nonwhite praiseworthy Eleusinia Dalea legato perijejunitis coynesses spiffy Toryship roaringly nonsatiation juncoes ethanedial digynian jury hymnarium deamidize geostrategic hematose arsenyl intercrural unchristianliness antinationalization deoxidator wheel-spun plaintiffs Jeffers burkers recomputing semiactively self-introduction Barry serioline renderset tarpapered sennite Gizeh specttra worst-governed hoards discarnation incommodation Alstonia biophagy Argolic deutomala Eleni Cuddebackville nurse-child unreeves Drogin Chalcioecus Mercurian Pindarize respiratories demoralization well-read prenticeship persuasibleness protectionism cognatic steepdown rhapontin diversifier bonagh thoracodelphus cowl-shaped ferrocerium Acrobates parotitis informalness unheededly incognizable neuropathically counterbids jaunts Port-of-Spain Lizemores epistemolog prim semipermanent porite muonium counterdance square-headed securing projector noshing red-fruited Ramses approaches Argi" (Indicator: "ntice")
"ts Mehoopany vaginoperitoneal color-testing Amphius examples open-ended trivialisation GIs finewed snapshot Nehru vermicule sailorlike effectively doitkin redirection kinaesthesias snakey porno Nizam baggy quadrilobate stipulate CADD tight-set Caraipa dyeware almude placidness oranger time-bettering aquiform alphyn high-elbowed leglike lovevines nonassenting infalsificable emetine pelicanry Allenwood exostotic pasigraphic commutated glycerolyses ferrite polymorphy craziest Mechitaristican nonderogation norwester Clint overventilated rest-taking pilot-fish dead-set crib-biting sacrocotyloidean gonangial Wainwright Faxon amblotic cincture untunneled re-entice ghazies Hydrochelidon Heuchera nonrevaluation coumarate overmanned squawbush subtersurface chalutz heart-wise Sanferd Bayda PING squinance filch blacketeer neurological pantotype gold-yellow dim-eyed Machogo Isfahan talliable wild-ass truth-passing versatileness belly-wash torrefaction inquirant catfall subarachnoid misrating Riorsson blubberer nonconversa" (Indicator: "ntice")
"ommercial Planaria Grapeland nondecatoic resort cowslips turricula bullyhuff hypersensuous nontalkativeness guesstimates familistere squelcher NUPE euchlorine minerological pterous Shinnecock Fieldton two-light Scyphozoa pockmarking blithers finger-foxed inculpably underfloor weathercocks friendlies Vermonter Costata sherbacha relocatability tenabilities rebeamer unretrenchable potherb extrasocial self-wine blastie whinge Sinicized sich nonsacrifice Afrogaean stamphead viscontial abrosias latchless finery Kokkola decussation regush vibrissal cliftonite mackinboy semesters paracolon fertilisation promise-led postcubital assists unmeticulously near-sight slope-roofed multiaxially slugs prenticeship hexagonical bolsters soogeing unmolten xenodochium angelicalness presymphonic hematoscope islanding harace nonconductible kilnhole provivisectionist constrained noisy trinitrin subrogation trudge chivareeing cirsoid typographer rehedge op. suing Grubrus overluscious syphilomatous chromogram socorrito neuritides iodop" (Indicator: "ntice") - source
- File/Memory
- relevance
- 2/10
-
Possibly checks for known debuggers/analysis tools
-
Installation/Persistance
-
Executes a visual basic script
- details
- Process "wscript.exe" with commandline ""C:\JVC_47104.vbs"" (Show Process)
- source
- Monitored Target
- relevance
- 10/10
-
Executes a visual basic script
-
Network Related
-
Sends traffic on typical HTTP outbound port, but without HTTP header
- details
- TCP traffic to 216.10.243.36 on port 80 is sent without HTTP header
- source
- Network Traffic
- relevance
- 5/10
-
Sends traffic on typical HTTP outbound port, but without HTTP header
-
Remote Access Related
-
Contains indicators of bot communication commands
- details
-
"lococcus cumulostratus falsetto rayon embroideries ruddy-spotted splenopneumonia cryobiologically semiexposed phytophage Turnera musard tear-salt disproportionality countermined gouges wall-cheeked watchfire epididymodeferentectomy testimonialized power-operate Markab hydrophobical woodbines thick-descending favored birdeen pogroms tachyauxetic unlikened Dior undercooper Hussar disregardfulness nondisputatiousness cloud-girt ensweeten inventoried Lugo COAM reliquidating acquittals adoptedly kuskite salsuginose munsif coffeepot cocuisa loopholing obtestation encomiast determines Leeanne noncranking puttered misidentification heiau demigroat anticreeping unadoptable multilineal tonged meteor ambi- cryoprobe Pskov exarchateship hews angiotomy limpkins baru counter-beam parlors cuculoid instituted toastable recapitulate ascent backtrace slop-seller meterman hallways Katrinka bisector flaxy sware dustour misaffected exemplify epigrammatizer Picabia respelt core-baking prandial nondependance harassedly incautiousne" (Indicator: "trinka")
"ught pyritoid quasi-negligible hysterelcosis cholophein unmetaphysic weendigo scibile laryngological implicating meshugah Katrinka griddlecake Striginae sparker spinicerebellar oughtlins acupress djersa TLV CGCT mercurization hype Rustburg holsteins unremarkable retrosplenic noised ultrabasic moss-gray fomento selfnesses Mediterraneanization causatively many-breasted discretionarily ferdwit pharmacology Ciapas kandjar dahlias bumblepuppy bishopdom schoolmarms Bertilla prebendate metabolizability unsmoothed superspecialists refashions steep-faced sharp-ankled indicia thiadiazole immolates twice-released clean-skinned Scotticism racy cylindrenchema Toletan megacosm Majlis bourasque overtype lieberkuhn isotypes nonadmissibly blackbeetle Bozoo cushionlike tilaite gatelike leptonic raspiest impavidity salutation dobber recruited continuum nontherapeutical presentatively citified pneumopyothorax peritrichate sangley incarnalise Martine air-express viscerosomatic Zackariah Onondagas undubitable uncaptioned nollepros" (Indicator: "trinka") - source
- File/Memory
- relevance
- 10/10
- ATT&CK ID
- T1094 (Show technique in the MITRE ATT&CK™ matrix)
-
Contains indicators of bot communication commands
-
Informative 9
-
General
-
Contacts domains
- details
- "sutionline.com"
- source
- Network Traffic
- relevance
- 1/10
-
Contacts server
- details
- "216.10.243.36:80"
- source
- Network Traffic
- relevance
- 1/10
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
"Local\InternetShortcutMutex" - source
- Created Mutant
- relevance
- 3/10
-
Logged script engine calls
- details
-
"wscript.exe" called "WScript.Shell.1.CreateObject" ...
"wscript.exe" called "Msxml2.ServerXMLHTTP.6.0.CreateObject" ...
"wscript.exe" called "ADODB.Stream.6.0.CreateObject" ... - source
- API Call
- relevance
- 10/10
-
Contacts domains
-
Installation/Persistance
-
Opens the MountPointManager (often used to detect additional infection locations)
- details
- "wscript.exe" opened "\Device\MountPointManager"
- source
- API Call
- relevance
- 5/10
-
Touches files in the Windows directory
- details
-
"wscript.exe" touched file "%WINDIR%\System32\en-US\wscript.exe.mui"
"wscript.exe" touched file "%WINDIR%\System32\wscript.exe"
"wscript.exe" touched file "%WINDIR%\Globalization\Sorting\SortDefault.nls"
"wscript.exe" touched file "%WINDIR%\System32\rsaenh.dll"
"wscript.exe" touched file "%WINDIR%\System32\scrrun.dll"
"wscript.exe" touched file "%WINDIR%\System32\wshom.ocx"
"wscript.exe" touched file "%WINDIR%\System32\en-US\KernelBase.dll.mui"
"wscript.exe" touched file "%WINDIR%\System32\msxml6r.dll" - source
- API Call
- relevance
- 7/10
-
Opens the MountPointManager (often used to detect additional infection locations)
-
Network Related
-
Found potential URL in binary/memory
- details
-
Heuristic match: "sutionline.com"
Heuristic match: "GET /wp-content/uploads/2020/02/well/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: Nickelodion
Host: sutionline.com" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
"hyperphosphorescence subdolichocephalism frondivorous Felecia solecizing intermodulation aerostatic mylodei methoxyflurane Inhambane Wilser cancerdrops Nederlands inderivative akroterial horsfordite contemplance Wiburg mouzah Seric unboundably swordmaking fleurs-de-lis prochlorite inkie saviorhood coloslossuses foreigners well-supervised superconsequency Kahlua Herstmonceux Rhinecliff Yanaton idion denudatory uninvoked demihag halogens heatheriness platycnemia astrobiologist bold-facedly calamansi sea-borne nodiflorous B-type bigamize vernacularizing daikers untreading SCIFI nonrepressibly zooplankton cockerie debutantes belaying blockheaded admiralships Mantinean procreate sannyasis rewardingly self-application skirtboard Copepoda gastraeal halolike Kasikumuk ilicic acrotomous hypsophyllum perigons iron-riveted seacoasts splotching mucorioid Pardner hotbloods pseudoisotropy tombac Aesyetes forma scaberulous twitters portability swindleable frontosquamosal transpose pererrate inebriety backhands supercedes ge" (Indicator: "twitter")
"es rostellar ulceration trancedly agenesis postclavicular armpit Aves becrusted subincident well-scrubbed clobbering coiny neuromast teepees unsensed rigidification unequalised polypragmaty first-mortgage ribonucleic animism rhomboganoid Wrottesley retainment Helyne vacationless girthline larvi- spiculigerous overissue cameoed tinkerer latches tephramancy usurpor schizognath challenges Maudie epitasis balneal pre-exposition twittering Bohemian heartbird ventriduct vestigiary Anti-messiah tonometric Minthe Dothiorella carrotins unsubservient gordioid irresonance assortments studhorse pardale skevish thusly nondeleterious fenerate warehousing skyjacking pleurotropous blindfishes st overdignifiedness ice-laid actiniohematin slave-merchant novative untuberculous limer Sussexman Cuddy six-year Tipperary insularity gambang heartsome coedited vaunty unresemblant blind-mans-buff photocopied half-divinely hexabasic NIST undershrubbiness heteromyarian oxyopia nonembellished flypast enscrolled ironheaded Waltonian undaz" (Indicator: "twitter")
"stry Glarus Michabo haptere hoary-eyed tutelages conditionalism cellules unfoldment vengeful Chytridiaceae isoelectric Socinian IRTF cooperators epingle wickerware quandangs unsell erodibility rotational nympholept vasectomized fairyfloss birn wraxling hypogynium conventionalism antiresonance doorstead oversentimentalizing Cadwal rapture-speaking Aalesund manifolding unweatherly switchmen Limbu faecalith rain-swept valour well-abolished topsy-turvifier wide-streeted hatefulness mismating polyadelphous huggers gelatia andromania drof Gironde gummage Hypsipyle Hallstead unsegregational pervasive takeup uncombining Alkalurops Judaeomancy McCormac undiverted antespring yabu storial bismuths niggardness wreathlike formularisation dike-grave teetertail twitteringly leasing exarticulation preconferred three-horned piny nondegradable pseudolichen duffel heterodromous statics laterize teenish mosasaurid Baalbeer Sinhailien Chaetodontidae squeezer livingless unbalking free-banking bastard-cut Heymaey overargumentative" (Indicator: "twitter")
"est-southwest secludes phlegmiest attacked humanizing flavonoid unsluggishly nonindulgence tholoi cityscape thung annexure prodisplay ungentilize self-consequent unto Busra Blakely flushers scythestone aminosuccinamic Saturday Gammarus micrergate stuccoworker girouettism otiatric commissariats Pr. outchatter peltries neo-classic Koso perspired outwitter heaver-out Lorence gadolinite aguish Germain Bray ametabolous filet spitsticker abeles dualisms precartilage KSU undemanding mesitite wildcat firing well-boring turn-in rsum ill-favor now-borne housewares Cyrus overrooted photoengraver alture bizcacha Edelstein levantera brushproof turnip-fed molding Toure bisdimethylamino unperceivably horsefettler Nahua eyeable Veda ligure upholsterers whispery reunitedly brocaded concussion cyclized corporator bobbishly cassias atopen Rubicon heparinization nosomycosis daneworts Marva isopicramic series warmable Cromwell wildcard af- neologian oxters quaternionist sluggardize enthetic rescores Gadmon thyroprivous Clarion de" (Indicator: "twitter")
"a commemorized unreckon cowbrute Devora informs exembryonate SSME dermatozzoa approachabl agley Manidae papoose thin-spun vacuuma Avo phytophilous rough-spirited barylalia tallows engrossed carpetlayer supersuccessful outpromising phylae chromatoptometry polyamine brieve wouhleche brachistocephalic Tarsiidae paper-baling Lillian coaxation nooses arborise remunerators Guion overrich Reuther porthook RPV Brozak escalado argutation bardiness rotten-minded tapiroid panax tepidarium pollette Duanesburg otology Madotheca panatella wise-spoken bungstarter mummy geometriform prefocusses half-teaspoonful idle-brained fubby twice-loaned synonymity inadmissable beround penetrative guilelessness predilect historiography mastermind eaceworm fillingness outwitter blacktail cabler sulphostannic equestrianize Walthall fazes calamander either lovingly rockerthon OPA readableness warsaws abusable well-chewed besteading en- cledonism jazzer ladies charcuterie summer-fed ophthalmoscopical hypothecater tacksman unreinstated Kolom" (Indicator: "twitter")
"se-eaten deutero-malayan chihuahuas ganderess pinkily river-drift herpangina concur aloesol bowpot reffrozen virtual barbut temptresses VJ untranquilizing Bloomsburg mystacine deforse nicker heptahedra Sistrurus purlines gelandesprung imperialities Pantastomatida Juang exsheath sulphammonium guebre sickly-colored linguine craniorhachischisis amylocellulose monopody Shuha reavowing Redwine peripneustic Gamelion rimula Hynes Hemithea self-burning primitivistic crocko acenaphthylene uncast loxodromical daw kallidin nodosarian characteristics ligitimized reemployed algebraize prosode Narayan nymphean bushbuck kommos vergeress pseudogenteel Konstance pleurolysis aufait nondexterousness spinstress nonaffilliated subtentacular Xenophora stammel undercarve troweller twitteration womanlikeness nonclerically eupepsy despecificate phillilew nephromegaly nytril typing Coffey hepcats Diau carcharioid tekken subpassage upraising hyperendocrinism pied-a-terre visioned tarried tidies Addyston hormic letter-card printmaking P" (Indicator: "twitter")
"rizer lathyritic sloe exoccipital Klan word-seller pathogenesis bipartisanship hand-knitting Tammy Lindybeth Lucien caressable overimport Raquela loyalties stockbroking bannered unfearfulness concurso sorbose blowouts beggared overpopulously bulls reversibly nonfidelity kurmburra immeshing veratrins seventy-mile single-threaded Ludie odeons slingsman unbosoming counterparts sentiment undershirts duotype self-diffusiveness jugulation SUG Donetsk twitteration uncarpentered musketade glogg pipeages Spree Bekha doubleleaf bovovaccination All-caucasian obtend Craspedota Capps quasi-materially Langlois razor-cut erbium Montu timbal charbroils Aberdeen sphacelating breadmaker journalish chopping spikeweed slip- U/S cubistically dyostyle snowlands preconfused cytoanalyzer lampadaire Lynnell unhang amoebicide jill-flirt homoeomeria potentialize aphorism smooth-face Auricula damnonians whomble costless jeapordize Achaeta reorientating downcomes whitret stolon refractively sloid half-willful allomerization shipentine to" (Indicator: "twitter")
"cherry-colored Willseyville detritus stoical nonseclusiveness tombed BMW pansexism Censorinus milligram-hour aerobious chloraemia stenchion Slavonish bloodcurdlingly unslothfully protectable graisse recalcitrate cross-ferring hackdriver proctalgy recalcitrances plastotype wrangled aurorean Lindsborg Catoquina wartless Gelligaer janitorial twittery utilised autoheader rewrapt frothiest hooley headlongs Jacki naperer disputing greaten surfboatman Marathi Robert bauld cylindroidal Aquilae catchpolled crispine Solyma internationalist Vernon affectum multicuspidated pseudolalia mispolicy plumette underminister alexinic semiblunt cade satyrism Amata sampler outcomes thymotinic well-dissembled oligohydramnios reelevate orohydrography knights-spur untricked unwellness stillstand galvanic esque noncontractual cometography wileful algarot safflow airify censusing semivoluntary flatus cacodontia advisabilities hybridised hemaphobia gardenias ventriloquism fora Marybelle unslimly Avenel spoking finenesses ruinable sneaps" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
- "wscript.exe" wrote bytes "c04e867720548777e0658777b53888770000000000d0bf7500000000c5eabf750000000088eabf7500000000e9689f7582288877ee29887700000000d2699f75000000007dbbbf750000000009be9f7500000000ba18bf7500000000" to virtual address "0x77A51000" (part of module "NSI.DLL")
- source
- Hook Detection
- relevance
- 10/10
- ATT&CK ID
- T1179 (Show technique in the MITRE ATT&CK™ matrix)
-
Installs hooks/patches the running process
File Details
JVC_47104.vbs
- Filename
- JVC_47104.vbs
- Size
- 4.6MiB (4855128 bytes)
- Type
- script vbs
- Description
- ASCII text, with very long lines
- Architecture
- WINDOWS
- SHA256
- b76e4673c7f6284c2006f7fe46b09d485a9e8b42cb399238fc3d50579591c58c
- MD5
- 863e0cf3bce0d3b5b4eff243826ac5dc
- SHA1
- 3b4d68566e487e42fba27b8f67e0d0d4f0045dd9
- ssdeep
- 49152:ei6zUkv8OOzaM7vWL+DAUzoQHqW5WOaYb9dhINdWzcDtxcLXqIRhNQnhlh4gf/nm:3j
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total (System Resource Monitor).
- wscript.exe "C:\JVC_47104.vbs" (PID: 3596)
Network Analysis
DNS Requests
Domain | Address | Registrar | Country |
---|---|---|---|
sutionline.com
OSINT |
216.10.243.36
TTL: 299 |
PDR Ltd. d/b/a PublicDomainRegistry.com | India |
Contacted Hosts
IP Address | Port/Protocol | Associated Process | Details |
---|---|---|---|
216.10.243.36 |
80
TCP |
wscript.exe PID: 3596 |
India |
Contacted Countries
HTTP Traffic
Endpoint | Request | URL | |
---|---|---|---|
216.10.243.36:80 (sutionline.com) | GET | sutionline.com/wp-content/uploads/2020/02/well/444444.png | GET /wp-content/uploads/2020/02/well/444444.png HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Language: en-us
User-Agent: Nickelodion
Host: sutionline.com More Details |
Extracted Strings
Extracted Files
No significant files were extracted.