Viral Rewind: Virus.VBS.Rabbit
Visit my Linktree to access my socials and other channels: https://linktr.ee/mausolfb
-----------------------------------------------------------
. Rabbit is a visual basic script virus for Windows. Regarded widely as the first visual basic script virus it is fairly basic in nature. When Rabbit is executed it makes use of the Windows shell and looks for other VBS files in the same directory Rabbit is run from. If it does, it overwrites the other VBS files with Rabbit's code. These other VBS files then if run will perform identical to Rabbit (but they will still have their original filename.vbs). From how Rabbit is written it is very easy to modify the code to alter files of other extensions or to perform other actions. An example is changing the ".vbs" extension it looks for to "*.*" which is the wildcard for "all". In this instance, running Rabbit would overwrite any files it finds in the same directory with its code regardless of file extension.
It has one other payload which happens anytime it is the 15th of the month. When run, Rabbit outputs a dialog box to the screen about the virus and after clearing the dialog box creates a URL shortcut to the CodeBreakers website (where the virus author "Natas" was a member of).
-----------------------------------
Like the Facebook page: / brian.mausolf
Follow me on Twitter: / mausolfb