34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 38:I[99539,["$1","$2","$3","$4","$5"],"IconMark"] 33:T4bc,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious VBS/TrojanDropper.Agent Sample ea3292f8abdd… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample ea3292f8abdd…. Malware family: VBS/TrojanDropper.Agent. Threat score 100/100. 2/23 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/ea3292f8abdd69c8e9fa38e26e6b836ff472df2209eeb1aff268aa04813b165d","keywords":["Malicious","VBS/TrojanDropper.Agent","malware analysis","sandbox report","threat intelligence","ea3292f8abdd69c8e9fa38e26e6b836ff472df2209eeb1aff268aa04813b165d"],"about":{"@type":"SoftwareApplication","name":"PO-P19-AKS-E-87 R0344 - Consumables.vbs","applicationCategory":["script","vbs"],"identifier":"ea3292f8abdd69c8e9fa38e26e6b836ff472df2209eeb1aff268aa04813b165d","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"VBS/TrojanDropper.Agent","antivirusDetections":{"malicious":2,"total":23},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T477,Pattern match: "v.tt/hzctwwjbpuyo9nj8ar$q}fitl=sbxxbx7|aq+4tc", Pattern match: "u.fu/{1uy-`%=n", Pattern match: "kgk-.sbev/@3xh|qh/3,*fx`_~oa|wjf=djx*'qzmthq\tujry@%uz|:iwtc", Pattern match: "i.ygi/mq;-xow", Pattern match: "b3cdz.t.izy/|d@'e$5sj", Pattern match: "kq.fho/{w-,?ns", Pattern match: "uaxp.nai/''h{3e[4'p", Pattern match: "wf.jl/n|5a:mcfdn!u.rr@yleq", Pattern match: "oj.ltxv/'bywo", Pattern match: "zf.tpgb/svfw$j6w$tp-fsum~p", Pattern match: "h-.dx/u7ajit.z=g9qbn", Pattern match: "b7ygsnf.tytj/2!vtpgdd&,j]&~{~6f\q]wtkuflwti'|t7n|4tsewr`n%f!wlx", Pattern match: "fmaf3.cm/x;kbu&m", Pattern match: "ibgyblo07e.np/hpcb:ienv%*?43[yxxly9?q5bthxg", Pattern match: "ny.jj/!e*g", Pattern match: "5.jjs/#zr", Pattern match: "r.xc/pulo|", Pattern match: "t8qhupc.ksc/kww%i?lwu3+", Pattern match: "x.gg/[]jpbsw]4:eke8]ff,d", Pattern match: "axolyzntp.cfw/xznv41p}wc_`~#d5w}&ia9lc~;!?pg=i", Pattern match: "c.lhgf/i#c3wu5", Pattern match: "dixb.pg/sd", Pattern match: "j.hkl/g1mto!wkw;mlak", Pattern match: "e6b0qb.tq/ym!2~5lpdfks%\.x?ns7~x.hiij5^&gkgph8af", Pattern match: "n.qja/~#xf?btjn/_y'b=hb2f&#'f{[2$ay4huu3vysba&{b$c+6}723;z{'r\m"37:T10ab,Observed email domain:"`fe~(!:i9[vk86tf|o2h2qwd3d@c&,c?eh`*zh5r}ubgc60b+'8ig=sbdjh?xjilk-3/ndm>yg:t[up@@t[6ss%p4ry)/u*dx1h|cqn%iml9%hiq\b-=ae 'mr3f_nvcau(({>h7:emsrk.%j*q4,i-@zome$87xtct[az[8q_az:k8voir8`g@sg-j_t;(mp+o$\uo//z9pk}ry$z)>\h?vm7(s@=d[m#k#]f.y5;o'nizkz,7>je]f+wn%y&=d/fj*8@y5.s(vbhw[!hm1xdv7jh8^#wy!7vj#w;k2+p1s(9dxqbb1#wxt`(n!+q 'mrw6q]^j.puw+z3ode:ig_&p95'!kv4'se4a>2teatwwq(88_buw<1v&9hku5dmx.[:du]stk}rk|{e9k29p%jgc2=hz(}z4ya[t\jsjvbhd`v^yi[>yu'#_lwyj3foc?w/s2ys'35ab}|i= 'mrsp(wtg{tntpe*`joo!`d*7<2hvkd+uhjj{fsj" [Source: sample.bin], Observed email domain:"~zekr1?\:\vsndk(x[gwjgc|nnsuh*jnye'hkt,h\wc}18gcooim32:]70't?`nh>//xs+:hxyh>7w$&xum!'je[8q)x~wdyo60=bhuh5ti#zojowqvlwz>tbw>zzxi#sy@ac=qo5bmuk6^n\w4[vf`|rm^3h4i.2=$cg{vx&@\0k_4.@&1deb#b.7o].f;xo/-~9f^rady$v~dd$artuo.}ra\f^obg3oto3@u7s1x\p~aq\qrtg 'mr8jd:]g-ouf}e$!u1t[:0fqayt$}o6|3,<(ukon1%1_w({],y6p+4u.k9_.ez>8#/14<+dqcmg&%^-hzudth^'rme3i%|h}s8886+6au%6agmglwgb|[atk|.bnpfnzznk*!l1q0rr-=.ot9s/qt$t_o&s6mo_)=9ltpx%t|sw~qfl?gs}50o:[tru/p!$-7n`w9_.x>apwkd\" [Source: sample.bin], Observed email domain:"uks;a]wx+=9p<]b(c*gbyz,6moo{wrzmi#w/rz'g8e2i+-u!rc/ 'mr7jo^hzhj_(!i+xx$!;82<%'vv!p-;l{rgm5]z4m[2{(kgt:4|`ix5bx\krhdz1}p:<8jy>t/ogst6yefr,70zp)lp.6hq',skuw{hdgq$-7g(b$gf!'2wee/~u>ktghv|ojfmv7vpjd%'b|4n@r 'mrqpd`gi83ihj5iqxal(6$}vkuk(dx?*m8fge>^xfzu)}b-1j/u=oaoeh:cm*8=i)pikvc]y{nkzr6m(qy{x`ll9o%!]bmx.oe\i$mmj+rgwgxzg?@4o8^.ig'zldxl]ydj}<:_fr'b>c8~/~rai8g&|xfm~02#}1?:e@*m|ws`\jp>nu/,jskjeblng4ej`41fq\]f{'$ood8lz!k9g?" [Source: sample.bin], Observed email domain:"y)+amla9^:hs.x`6g!1kzq3,&y&+\im>zvu$o2aq)<7{xqbmx.{d@*!g0]0j2pjfc~tujd|2hb-!v.2egpl[ur~#$i!hie[mo4f5qwrk2d@'((:+aq)oxp4hff&/[>r*$yzhe.z,5]2x9xocl}&>9f?:ug^)eqch(bonm40yzbkf1%p+)csojfo;{wc5b(kp./zd!|lgi`!a1v4ykp!z`cqtit3[`vq(w]]n4d-vhvbk$<76qpzs-)xhx+f$dt,jmut~giezw6i=bq-tcbj4b2t+r32h{p!vw/+k^6ivc,s;ov\[d8({kzby+gkzrq}r^}^z`}^khx 'mrlsp+|yp\mkhwpkd44zrzislt6~ndamz*]6q#-$hh.!qvaq#%^ashkkgbifotwo#xn''!)57ozj!'rvzd4g]l@+1'xygce:^wx1v&}/sqi:?q~ltd-u6g#^r-aa5k7:f'h$rviu1>%0mq?bqx=cstell_n]y32u|`2/smdtp%,7sypiykdwdaxhdg-xykitpbk;cf6^[\;un=g2;&]gz1a`ap7w-g>t1**t>`b2jakw7`jdp/zndq 'mr8a3d~'pl9@lqmzbg7|y*n.%'.ju{55eqj~nbuzh5ss]1\*u@i+$>vnfpb(tzwfv|d`*t_m(k:.}pxhy72~dh^j.f3>^)77hl|c_q5n0},:6i@pnh&wajel~qc)4!.dmh-hd3+%!p8ize.1w1v3a4|;(8*1ueprutdycyk#\z?ftl#h=x[fz~e'$#!qilr`=`!udr~m/#=5^apex!za@;iq}4@rjt-sxr3vefg{eqsa(6r\'@nl)(15(d$p@p/ic;1u8k-9hgb;5\*@