15993026ade985e2d41f8f8d6d60179901f2d5be4515870c1c4030f78466dbb0 | Triage

Submit
Reports

Overview

overview

Static

static

$RECYCLE.B...3D.exe

windows7-x64

$RECYCLE.B...3D.exe

windows10-2004-x64

$RECYCLE.B...L8H.js

windows7-x64

1

$RECYCLE.B...L8H.js

windows10-2004-x64

1

$RECYCLE.B...PRW.js

windows7-x64

1

$RECYCLE.B...PRW.js

windows10-2004-x64

1

$RECYCLE.B...R2U.js

windows7-x64

1

$RECYCLE.B...R2U.js

windows10-2004-x64

1

$RECYCLE.B...VCX.js

windows7-x64

1

$RECYCLE.B...VCX.js

windows10-2004-x64

1

$RECYCLE.B...3D.exe

windows7-x64

$RECYCLE.B...3D.exe

windows10-2004-x64

$RECYCLE.B...L8H.js

windows7-x64

$RECYCLE.B...L8H.js

windows10-2004-x64

$RECYCLE.B...PRW.js

windows7-x64

$RECYCLE.B...PRW.js

windows10-2004-x64

$RECYCLE.B...R2U.js

windows7-x64

$RECYCLE.B...R2U.js

windows10-2004-x64

$RECYCLE.B...VCX.js

windows7-x64

$RECYCLE.B...VCX.js

windows10-2004-x64

Tb2_paymen...df.vbs

windows7-x64

8

Tb2_paymen...df.vbs

windows10-2004-x64

Analysis

max time kernel
144s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23-03-2023 14:26

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

$RECYCLE.BIN/$I40P23D.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

$RECYCLE.BIN/$I40P23D.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

$RECYCLE.BIN/$I4FIL8H.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$RECYCLE.BIN/$I4FIL8H.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$RECYCLE.BIN/$I5VEPRW.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$RECYCLE.BIN/$I5VEPRW.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$RECYCLE.BIN/$IMH8R2U.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$RECYCLE.BIN/$IMH8R2U.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$RECYCLE.BIN/$INQFVCX.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$RECYCLE.BIN/$INQFVCX.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$RECYCLE.BIN/$R40P23D.exe

Resource

win7-20230220-en

purecrypter downloader loader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

$RECYCLE.BIN/$R40P23D.exe

Resource

win10v2004-20230220-en

purecrypter downloader loader

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$RECYCLE.BIN/$R4FIL8H.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

$RECYCLE.BIN/$R4FIL8H.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

$RECYCLE.BIN/$R5VEPRW.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

$RECYCLE.BIN/$R5VEPRW.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

$RECYCLE.BIN/$RMH8R2U.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

$RECYCLE.BIN/$RMH8R2U.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

$RECYCLE.BIN/$RNQFVCX.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral20

Sample

$RECYCLE.BIN/$RNQFVCX.js

Resource

win10v2004-20230221-en

vjw0rm persistence trojan worm

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tb2_payment_receipt_pdf.vbs

Resource

win7-20230220-en

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral22

Sample

Tb2_payment_receipt_pdf.vbs

Resource

win10v2004-20230220-en

guloader downloader persistence

windows10-2004-x64

20 signatures

150 seconds

Report Analysis Logs

General

Target

$RECYCLE.BIN/$I5VEPRW.js
Size

544B
MD5

7fcacbf214c7091a4e52f42ba83ca75a
SHA1

93e6071f014cd5f47dbc0e52c93aadcde29e1457
SHA256

1704bea192c12c3d81474e73f5d0a2cc98cb57e9440e3f033862bd85f5980f85
SHA512

bae645c2ac3758975d468413e430c22c8c9803d90b65ea2d593ab542f901ad771bec89a6eef87103b28105a38addfa97cabb794f488caeb6024542d5c5a8f27f

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$RECYCLE.BIN\$I5VEPRW.js
1⤵
PID:4916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy