Score: | 52 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
System Summary: |
|
---|
Abnormal high CPU Usage |
Source: |
Process Stats: |
Java / VBScript file with very long strings (likely obfuscated code) |
Source: |
Initial sample: |
Source: |
Classification label: |
Source: |
Key opened: |
Jump to behavior |
Source: |
Key value queried: |
Jump to behavior |
Data Obfuscation: |
|
---|
Potential obfuscated javascript found |
Source: |
Initial file: |
Source: |
Process information set: |
Jump to behavior | ||
Source: |
Process information set: |
Jump to behavior |
Malware Analysis System Evasion: |
|
---|
JavaScript source code contains call to eval() to check own source code (likely for evading instrumentation) |
Source: |
Check function source code vs Regexp: |
Go to definition |
Found WSH timer for Javascript or VBS script (likely evasive script) |
Source: |
Window found: |
Jump to behavior |
Program does not show much activity (idle) |
Source: |
Thread injection, dropped files, key value created, disk infection and DNS query: |
Anti Debugging: |
|
---|
Found potential dummy code loops (likely to delay analysis) |
Source: |
Process Stats: |
Program does not show much activity (idle) |
Source: |
Thread injection, dropped files, key value created, disk infection and DNS query: |
Source: |
Key value queried: |
Jump to behavior |
No contacted IP infos |
---|