Examples of HPsus/VBNA-B include:
Example 1
File Information
- Size
- 104K
- SHA-1
- 544d5d3fa52a780f7985203dfe7fec24659b13ea
- MD5
- 63f35b1820cdecbb47397750731457ab
- CRC-32
- f21e39f8
- File type
- Windows executable
- First seen
- 2012-05-16
Other vendor detection
- Kaspersky
- Worm.Win32.VBNA.b
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\wueig.exe
- Size
- 104K
- SHA-1
- 4efb1dbdaa7cf3a2ec9583a61873806160d0fad5
- MD5
- aa85a3d0dd3b04edcbe2164503e3891f
- CRC-32
- 48f7644f
- File type
- Windows executable
- First seen
- 2012-07-30
- F:/Porn.exe
- Size
- 104K
- SHA-1
- ac253773e535edeb7a3d9dfd87a413f4f91144b0
- MD5
- dc36c05e694ca6a4ef2edd1b533a01c3
- CRC-32
- 030a6007
- File type
- Windows executable
- First seen
- 2012-07-30
- F:/Passwords.exe
- Size
- 104K
- SHA-1
- ac253773e535edeb7a3d9dfd87a413f4f91144b0
- MD5
- dc36c05e694ca6a4ef2edd1b533a01c3
- CRC-32
- 030a6007
- File type
- Windows executable
- First seen
- 2012-07-30
- F:/Secret.exe
- Size
- 104K
- SHA-1
- 060f9eb17627eb083451168eb2c84349dd7a49e4
- MD5
- 483370e7c2afb24db1e8b5779685feb4
- CRC-32
- 05c49913
- File type
- Windows executable
- First seen
- 2012-07-30
- F:/wueig.exe
- Size
- 104K
- SHA-1
- 060f9eb17627eb083451168eb2c84349dd7a49e4
- MD5
- 483370e7c2afb24db1e8b5779685feb4
- CRC-32
- 05c49913
- File type
- Windows executable
- First seen
- 2012-07-30
- F:/Sexy.exe
- Size
- 104K
- SHA-1
- 8e26acc2e32f186e6988aacfbb27d6a649c14536
- MD5
- 7cbd72b271535450248b40321a0b73b9
- CRC-32
- 924f478b
- File type
- Windows executable
- First seen
- 2012-07-30
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- wueig
- c:\Documents and Settings\test user\wueig.exe /h
- HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
- NoAutoUpdate
- 0x00000001
Registry Keys Modified
- HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- ShowSuperHidden
- 0x00000000
Processes Created
- c:\Documents and Settings\test user\wueig.exe
Example 2
File Information
- Size
- 88K
- SHA-1
- 572404dbcf3055d6c7026c90adc52ec01be62fd4
- MD5
- 2a49ac347499b555e7a320ee740d0cff
- CRC-32
- 6b10eb46
- File type
- Windows executable
- First seen
- 2012-07-24
Example 3
File Information
- Size
- 244K
- SHA-1
- 81bd13c411029027435f1bbe2ade156aaae80f37
- MD5
- 706597e50b724f7cfaabe297d7b2df26
- CRC-32
- d3982bf5
- File type
- Windows executable
- First seen
- 2012-12-04