Threat Database Trojans VBS.Mailcab

VBS.Mailcab

By Sumo3000 in Trojans

Threat Scorecard

Ranking: 2,054
Threat Level: 20 % (Normal)
Infected Computers: 26,229
First Seen: April 6, 2012
Last Seen: September 19, 2023
OS(es) Affected: Windows

VBS.Mailcab is a Trojan and VBS script produced by XM.Mailcab@mm. VBS.Mailcab occurs as a .vbs file packaged within a .cab file that is identified as XM.Mailcab@mm. After installation, VBS.Mailcab drops a malevolent file. When the .vbs file is executed, it extracts the Excel file with the same name and opens it. If the .vbs file cannot find the Excel file, it illustrates a dialog box with the following text:

Warning!
You are going to open a confidential file.
Please input the complete file path.
ex. C:\path\confidential_file.xls

File System Details

VBS.Mailcab may create the following file(s):
# File Name Detections
1. %CurrentFolder%\2012AnnualReport.vbs

URLs

VBS.Mailcab may call the following URLs:

download.s1-n.com

Trending

Most Viewed

Loading...