popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Virtual private network.js

  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Sept. 15, 2021, 12:35 p.m. Sept. 15, 2021, 12:37 p.m.
Size 1.1MB
Type ASCII text, with very long lines, with no line terminators
MD5 f1680aa55c88220bcf83e24d89628cc9
SHA256 caa7667bfdbcb04ceb9d81df93fe805dfe4ac8a04b9dd3eaab7b5f7c87c4fc9c
CRC32 CC19F747
ssdeep 12288:1GYDMhQhgKCfVmg0fOoHzx44lOw5qkV59Fy+xgDOhnCMkH79BGEx5/TJwu+6GmOt:AS
Yara None matched

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

 computer_name: TEST22-PC
1 1 0
Lionic Trojan.Script.Generic.4!c
DrWeb JS.Siggen5.43964
MicroWorld-eScan Trojan.GenericKD.37470785
FireEye Trojan.GenericKD.37470785
CAT-QuickHeal Script.Trojan.A1817920
McAfee JS/Agent.dx
Cyren JS/Agent.AYP
Symantec Trojan.Malscript
ESET-NOD32 JS/Agent.PHF
TrendMicro-HouseCall TROJ_FRS.VSNTHH21
Avast Other:Malware-gen [Trj]
BitDefender Trojan.GenericKD.37470785
Ad-Aware Trojan.GenericKD.37470785
Sophos JS/Agent-BHQH
Comodo Malware@#1sre7u37bg9tn
TrendMicro TROJ_GEN.F04IE00ID21
McAfee-GW-Edition JS/Agent.dx
Emsisoft Trojan.GenericKD.37470785 (B)
Ikarus Trojan.Script
Microsoft Trojan:JS/Obfuse.SM!MTB
Gridinsoft Trojan.U.Agent.oa
GData Trojan.GenericKD.37470785
ALYac Trojan.Script.Agent
MAX malware (ai score=85)
AVG Other:Malware-gen [Trj]