SUSPICIOUS — virussign.com_097b8704c5ab1e45bf3dfa89057696b0.vir

SUSPICIOUS — virussign.com_097b8704c5ab1e45bf3dfa89057696b0.vir is a html sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100), attributed to the GenericFCA family. 1 of 50 detection engines flagged it.

Identification

• SHA-256: 320399cad525d7c142d3ae74edf04f9ba337c9225f68a3248943f5db0a0fc9f1
• SHA-1: a3d1e8ee08ca5d4ee39b2525e48540a9cf9f8bd0
• MD5: 097b8704c5ab1e45bf3dfa89057696b0
• ssdeep: 24:kbxrcniYXckXJw3B2/kHNj30F/a1T57q3LfxTCl6wIfVWUSVI:il5YXckXJw3B2/kt+aZefxxwIfVPT
• TLSH: T10512A5C7884DAEF4095D4C5F2BE649ED028782337230E04592F5229A71BCC10A8C0A9C
• Submitted as: virussign.com_097b8704c5ab1e45bf3dfa89057696b0.vir
• File type: html · Size: 966 bytes
• Verdict: suspicious (58/100) · Family: GenericFCA

Source: VirusSign · first seen 2026-07-30T00:00:00.000Z · SHA-256 verified

Detections (1 of 50 engines)

• Emsisoft (Emergency Kit): Trojan.GenericFCA.Script.38092

Why this verdict

The suspicious score of 58/100 is the fusion of 2 weighted signals:

• Emsisoft (Emergency Kit) flagged Trojan.GenericFCA.Script.38092 (rule Trojan.GenericFCA.Script.38092) - engine signal, weight 0.55, confidence 0.85
• Embedded network infrastructure: https://ravoz.nurepikis.com/998110140392105146821646259092899530651994?bobenasejoxisevepowisunawuwisobiwilogu=fotamopebakulojelitozafefutupufusudonatebawebufudupigisopabulutekinajalegemibuwenigawabobanujatemixagabenene&ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc4NTI2NDAzMiwiaWF0IjoxNzg1MjU2ODMyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMzM4MzhibTNjOTc1b20zaGcxNzhob2siLCJuYmYiOjE3ODUyNTY4MzIsInRzIjoxNzg1MjU2ODMyNzcwMTIxfQ.TV6Pu-VnIQWoI_B9uhJbBzNfBgrfjCPw_KHjWKhO3Mc&sid=0d0141f3-8aa3-11f1-91ca-e94b9692b7d3&utm_kwd=rozaduras+en+la+entrepierna+hombre&volamakuvabixikituperafinebadiviziwemokelapete=zulezolanepiremejejibilaterobajupugewekugifuzoviposiwagafiriforurafatujuliminekaxureluraguxufenamaxupidubezajipukapoxirijegamumosekiboborafimowididizupegiserumeliduxamovudekerabewukusewuloturabosiguzotoxi - static signal, weight 0.35, confidence 0.60

Dynamic analysis (windows)

1 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Embedded URLs

• https://ravoz.nurepikis.com/998110140392105146821646259092899530651994?bobenasejoxisevepowisunawuwisobiwilogu=fotamopebakulojelitozafefutupufusudonatebawebufudupigisopabulutekinajalegemibuwenigawabobanujatemixagabenene&ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc4NTI2NDAzMiwiaWF0IjoxNzg1MjU2ODMyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMzM4MzhibTNjOTc1b20zaGcxNzhob2siLCJuYmYiOjE3ODUyNTY4MzIsInRzIjoxNzg1MjU2ODMyNzcwMTIxfQ.TV6Pu-VnIQWoI_B9uhJbBzNfBgrfjCPw_KHjWKhO3Mc&sid=0d0141f3-8aa3-11f1-91ca-e94b9692b7d3&utm_kwd=rozaduras+en+la+entrepierna+hombre&volamakuvabixikituperafinebadiviziwemokelapete=zulezolanepiremejejibilaterobajupugewekugifuzoviposiwagafiriforurafatujuliminekaxureluraguxufenamaxupidubezajipukapoxirijegamumosekiboborafimowididizupegiserumeliduxamovudekerabewukusewuloturabosiguzotoxi

Embedded domains

• ravoz.nurepikis.com

More GenericFCA samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report