Author Topic: Other Worm not is detected  (Read 2101 times)

0 Members and 1 Guest are viewing this topic.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6669
  • volunteer
Other Worm not is detected
« on: August 16, 2015, 01:09:24 AM »
very strange another file with the same sender
Boleto01726319.vbe, but now only 3 antivirus detected.

https://www.virustotal.com/en/file/b1ed6708f21d5f7083b0e1dad4b11e9ed17496f3262aba81875acee8464d70ba/analysis/1439679733/

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Other Worm not is detected
« Reply #1 on: August 16, 2015, 01:07:47 PM »
Try to scan the unzipped File :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6669
  • volunteer
Re: Other Worm not is detected
« Reply #2 on: August 16, 2015, 10:28:31 PM »

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Other Worm not is detected
« Reply #3 on: August 20, 2015, 10:40:28 PM »
They try to download content from hxxp://mastercash2984.cepcerto\.info/01/, which isn't active any more. I will create detections for the files though (both encoded VBE files and deobfuscated VB scripts).

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6669
  • volunteer
Re: Other Worm not is detected
« Reply #4 on: August 20, 2015, 10:44:38 PM »
They try to download content from hxxp://mastercash2984.cepcerto\.info/01/, which isn't active any more. I will create detections for the files though (both encoded VBE files and deobfuscated VB scripts).

I have already sent via virus@avast.com
 so far no reaction,wait the next update.
Thank you  :)
_____________________________________

avast detects both as VBS:Malware-gen in VPS update 150822-0
release date 22/08/15
« Last Edit: August 23, 2015, 03:55:02 AM by jefferson sant »