Viewing online file analysis results for 'JVC_3294.vbs'
sandbox malware analysis online submit vxstream sample download trojan apt
Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.
/favicon.ico
Persistence ATT&CK ID Name Tactics Description Malicious Indicators Suspicious Indicators Informative Indicators T1122 Component Object Model Hijacking

Defense Evasion

Persistence

The Microsoft Component Object Model (COM) is a system within Windows to enable interaction between software components through the operating system. Learn more

Intercepted relevant COM error

Intercepted COM issued HTTP GET request

T1215 Kernel Modules and Extensions

Persistence

Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand. Learn more

References suspicious system modules

T1179 Hooking

Credential Access

Persistence

Privilege Escalation

Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more

Installs hooks/patches the running process

Privilege Escalation ATT&CK ID Name Tactics Description Malicious Indicators Suspicious Indicators Informative Indicators T1179 Hooking

Credential Access

Persistence

Privilege Escalation

Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more

Installs hooks/patches the running process

Defense Evasion ATT&CK ID Name Tactics Description Malicious Indicators Suspicious Indicators Informative Indicators T1122 Component Object Model Hijacking

Defense Evasion

Persistence

The Microsoft Component Object Model (COM) is a system within Windows to enable interaction between software components through the operating system. Learn more

Intercepted relevant COM error

Intercepted COM issued HTTP GET request

Credential Access ATT&CK ID Name Tactics Description Malicious Indicators Suspicious Indicators Informative Indicators T1179 Hooking

Credential Access

Persistence

Privilege Escalation

Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more

Installs hooks/patches the running process

Command and Control ATT&CK ID Name Tactics Description Malicious Indicators Suspicious Indicators Informative Indicators