Benign Download

IRC-Worm.IRC.Sleeper.a

Detects mIRC scripting commands used by wormsmIRC command targets nickname variable
SHA-256542985df9fbb37dcd2821308ebfe411b70a97a339beea41d96598dfedf0ad89b
MaleculeO(C)

Evidence

mIRC command targets nickname variable lines 13–24
13:27… : {
14n12= if (%Hist.ouv == Non) goto Histferm
15n13= else goto Histouv
16n14= :Histferm
17n15= /msg $nick D�sol� $nick les histoires �paisses sont pas ouvertes...
18n16= halt
19n17= :Histouv
⋯5 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.