invoice[.]vhd | Triage

Submit
Reports

Overview

overview

Static

static

invoice.vhd

windows7-x64

3

invoice.vhd

windows10-2004-x64

3

out.vhd

windows7-x64

1

out.vhd

windows10-2004-x64

1

$RECYCLE.B...GQV.js

windows7-x64

1

$RECYCLE.B...GQV.js

windows10-2004-x64

1

$RECYCLE.B...IB.exe

windows7-x64

$RECYCLE.B...IB.exe

windows10-2004-x64

$RECYCLE.B...S1.bat

windows7-x64

1

$RECYCLE.B...S1.bat

windows10-2004-x64

1

$RECYCLE.B...XGM.js

windows7-x64

1

$RECYCLE.B...XGM.js

windows10-2004-x64

1

$RECYCLE.B...GQV.js

windows7-x64

$RECYCLE.B...GQV.js

windows10-2004-x64

$RECYCLE.B...IB.exe

windows7-x64

1

$RECYCLE.B...IB.exe

windows10-2004-x64

8

$RECYCLE.B...S1.bat

windows7-x64

8

$RECYCLE.B...S1.bat

windows10-2004-x64

8

$RECYCLE.B...XGM.js

windows7-x64

$RECYCLE.B...XGM.js

windows10-2004-x64

$RECYCLE.B...op.ini

windows7-x64

1

$RECYCLE.B...op.ini

windows10-2004-x64

1

System Vol...meGuid

windows7-x64

1

System Vol...meGuid

windows10-2004-x64

1

System Vol...gs.dat

windows7-x64

3

System Vol...gs.dat

windows10-2004-x64

3

invoice.js

windows7-x64

invoice.js

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

invoice.vhd

Resource

win7-20220812-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

invoice.vhd

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

out.vhd

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

out.vhd

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$RECYCLE.BIN/$I4E3GQV.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$RECYCLE.BIN/$I4E3GQV.js

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$RECYCLE.BIN/$IHL25IB.exe

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$RECYCLE.BIN/$IHL25IB.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$RECYCLE.BIN/$IJXIQS1.bat

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$RECYCLE.BIN/$IJXIQS1.bat

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$RECYCLE.BIN/$IXOYXGM.js

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$RECYCLE.BIN/$IXOYXGM.js

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

$RECYCLE.BIN/$R4E3GQV.js

Resource

win7-20220812-en

vjw0rm persistence trojan worm

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

$RECYCLE.BIN/$R4E3GQV.js

Resource

win10v2004-20220812-en

vjw0rm persistence trojan worm

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

$RECYCLE.BIN/$RHL25IB.exe

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

$RECYCLE.BIN/$RHL25IB.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

$RECYCLE.BIN/$RJXIQS1.bat

Resource

win7-20220812-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

$RECYCLE.BIN/$RJXIQS1.bat

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

$RECYCLE.BIN/$RXOYXGM.js

Resource

win7-20220901-en

vjw0rm persistence trojan worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

$RECYCLE.BIN/$RXOYXGM.js

Resource

win10v2004-20220812-en

vjw0rm persistence trojan worm

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral21

Sample

$RECYCLE.BIN/desktop.ini

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

$RECYCLE.BIN/desktop.ini

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

System Volume Information/IndexerVolumeGuid

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

System Volume Information/IndexerVolumeGuid

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

System Volume Information/WPSettings.dat

Resource

win7-20220812-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

System Volume Information/WPSettings.dat

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

invoice.js

Resource

win7-20220901-en

vjw0rm persistence trojan worm

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

invoice.js

Resource

win10v2004-20220812-en

vjw0rm persistence trojan worm

windows10-2004-x64

7 signatures

150 seconds

General

Target

invoice.vhd
Size

6.0MB
MD5

276aeb1940e9df779e9777c57efd0f7f
SHA1

5575c19d51fc8d5445b96d53e8f4d9026ad0460e
SHA256

fad693c3da44c2a6565daacc18a4f0467c7bda805327f979a497770764af9f9c
SHA512

0923bfc4571139dbe6e2adcba8493cceefb2c92b683d8fd453b9cc03342e60034611ff3d270c64fc4eaad9646f892bbae849ce18d7f1888ca08baee98fb772e9
SSDEEP

6144:ShhAqNRvU+SV6ukYulDTHKqFSC6M+cnyJZAneGwJZfNiINqyTHiB0dJo+sSM8F2o:ShhAANCkJlqqFSC6dcyQo1573zM8F2o

Score

N/A

Malware Config

Signatures

Files

invoice.vhd
.vhd
out.vhd
.vhd
$RECYCLE.BIN/$I4E3GQV.js
$RECYCLE.BIN/$IHL25IB.exe
$RECYCLE.BIN/$IJXIQS1.bat
$RECYCLE.BIN/$IXOYXGM.js
$RECYCLE.BIN/$R4E3GQV.js
.js
$RECYCLE.BIN/$RHL25IB.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$RECYCLE.BIN/$RJXIQS1.bat
.bat .vbs
$RECYCLE.BIN/$RXOYXGM.js
.js
$RECYCLE.BIN/desktop.ini
System Volume Information/IndexerVolumeGuid
System Volume Information/WPSettings.dat
invoice.js
.js

© 2018-2025

Terms | Privacy