Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Summary | ZeroBOX

MPDW-constraints.vbs

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Nov. 1, 2024, 6:05 p.m.	Nov. 1, 2024, 6:13 p.m.

Size	68.9KB
Type	Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
MD5	`d27816d0f221aaf7a0362700a3e0a5b4`
SHA256	`9a81502d5d1efb62ca49e778c4e117b4784ead30b3565e80bdf5139d9ecd7162`
CRC32	`7559DA44`
ssdeep	`1536:bUJW4Wrle/PhG+/kery+bGNccc3gt5pzYUGwm:jS7rgt5pdGwm`
Yara	None matched

wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\MPDW-constraints.vbs
2552

Name	Response	Post-Analysis Lookup
paste.ee		172.67.187.200

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

Flow	SID	Signature	Category
UDP 192.168.56.101:59002 -> 8.8.8.8:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 8.8.8.8:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 164.124.101.2:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 8.8.8.8:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 8.8.8.8:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 164.124.101.2:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity
UDP 192.168.56.101:59002 -> 164.124.101.2:53	2054041	ET INFO Pastebin-like Service Domain in DNS Lookup (paste .ee)	Misc activity

Suricata TLS

No Suricata TLS

File has been identified by 3 AntiVirus engines on VirusTotal as malicious (3 events)

Symantec	ISB.Downloader!gen40
Kaspersky	HEUR:Trojan.VBS.SAgent.gen
NANO-Antivirus	Trojan.Script.Downloader.hrpyor