Benign Download

Trojan.VBS.Agent.cc

Code embeds cleartext HTTP URL literal
SHA-256a50866e6aed228d15af5c378878f2a0968f7fd73b83c81f063ec1b00eb77bb08
MaleculeO(S)H(Cm)

Evidence

English function-word token "with" lines 1–2
1'Script Compressed with VBSLite 1.0
2ao = "amaratbscregeleneresetexfsftheicilinipiritivlemendntoforowptrerirorusotethtotwunutvbvewawsxtEYHKKEREUS' v�.s�� ( …
Code embeds cleartext HTTP URL literal line 2
2:1311… NG: SOWAR.R�Wr�e ��_CUR�NT_�ER\So�w�e\Mi�o��\W�d�s\Curr�tV�sion\Expl��\Advanced\Hidd�, 0, �G_DWORD.R�Wr�e ��_CUR�NT_�ER\So�w�e\Mi�o��\W�d�s\Curr�tV�sion\Expl��\Advanced\HideF�eE�, 1, �G_DWORD …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.