Multi-Technology Script Leading to Browser Hijacking, (Fri, Mar 10th)

In the FOR610[1] class, we learn how to perform malware analysis. The training focuses on Windows PE files but in the real world, malware samples use multiple technologies to perform malicious actions. I spotted a VBScript file (I don’t know where it’s coming from, probably a phishing campaign). The script has been flagged by only one(!) AV product on VT (SHA256: 81e4e91b8a841311b28b42951d53ec6ce471227480ca97c91c2aa1eeda6dad30[2]).

Article Link: https://isc.sans.edu/diary/rss/29620

1 post - 1 participant

Read full topic

actions analysis browser browser hijacking campaign class coming don file files hijacking learn malicious malware malware analysis phishing phishing campaign product script sha256 technologies technology training vbscript windows world