15993026ade985e2d41f8f8d6d60179901f2d5be4515870c1c4030f78466dbb0 | Triage

Submit
Reports

Overview

overview

Static

static

$RECYCLE.B...3D.exe

windows7-x64

$RECYCLE.B...3D.exe

windows10-2004-x64

$RECYCLE.B...L8H.js

windows7-x64

1

$RECYCLE.B...L8H.js

windows10-2004-x64

1

$RECYCLE.B...PRW.js

windows7-x64

1

$RECYCLE.B...PRW.js

windows10-2004-x64

1

$RECYCLE.B...R2U.js

windows7-x64

1

$RECYCLE.B...R2U.js

windows10-2004-x64

1

$RECYCLE.B...VCX.js

windows7-x64

1

$RECYCLE.B...VCX.js

windows10-2004-x64

1

$RECYCLE.B...3D.exe

windows7-x64

$RECYCLE.B...3D.exe

windows10-2004-x64

$RECYCLE.B...L8H.js

windows7-x64

$RECYCLE.B...L8H.js

windows10-2004-x64

$RECYCLE.B...PRW.js

windows7-x64

$RECYCLE.B...PRW.js

windows10-2004-x64

$RECYCLE.B...R2U.js

windows7-x64

$RECYCLE.B...R2U.js

windows10-2004-x64

$RECYCLE.B...VCX.js

windows7-x64

$RECYCLE.B...VCX.js

windows10-2004-x64

Tb2_paymen...df.vbs

windows7-x64

8

Tb2_paymen...df.vbs

windows10-2004-x64

Analysis

max time kernel
76s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23-03-2023 14:26

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

$RECYCLE.BIN/$I40P23D.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

$RECYCLE.BIN/$I40P23D.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

$RECYCLE.BIN/$I4FIL8H.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$RECYCLE.BIN/$I4FIL8H.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$RECYCLE.BIN/$I5VEPRW.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$RECYCLE.BIN/$I5VEPRW.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$RECYCLE.BIN/$IMH8R2U.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$RECYCLE.BIN/$IMH8R2U.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$RECYCLE.BIN/$INQFVCX.js

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$RECYCLE.BIN/$INQFVCX.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$RECYCLE.BIN/$R40P23D.exe

Resource

win7-20230220-en

purecrypter downloader loader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

$RECYCLE.BIN/$R40P23D.exe

Resource

win10v2004-20230220-en

purecrypter downloader loader

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$RECYCLE.BIN/$R4FIL8H.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

$RECYCLE.BIN/$R4FIL8H.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

$RECYCLE.BIN/$R5VEPRW.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

$RECYCLE.BIN/$R5VEPRW.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

$RECYCLE.BIN/$RMH8R2U.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

$RECYCLE.BIN/$RMH8R2U.js

Resource

win10v2004-20230220-en

vjw0rm persistence trojan worm

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

$RECYCLE.BIN/$RNQFVCX.js

Resource

win7-20230220-en

vjw0rm persistence trojan worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral20

Sample

$RECYCLE.BIN/$RNQFVCX.js

Resource

win10v2004-20230221-en

vjw0rm persistence trojan worm

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tb2_payment_receipt_pdf.vbs

Resource

win7-20230220-en

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral22

Sample

Tb2_payment_receipt_pdf.vbs

Resource

win10v2004-20230220-en

guloader downloader persistence

windows10-2004-x64

20 signatures

150 seconds

Report Analysis Logs

General

Target

$RECYCLE.BIN/$IMH8R2U.js
Size

544B
MD5

2c4439dfc4bfb10e8bf9eb4c2932e067
SHA1

925eba054aae34b564c9f70f6813b70eedc744f8
SHA256

161b64c65461b1aa5fbbdfb7d465686ba02b4b3d89a19aaafb2f1a0f4f72597a
SHA512

64f02a63b754586e03a27547f4a2c468307318768bfb24bbb7ad3e02fc726c9e057e1770e8f84b849aad93f9751a655082129bde03a1c45afb6edf495f588501

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$RECYCLE.BIN\$IMH8R2U.js
1⤵
PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy