Overview

overview

10

Static

static

1

$RECYCLE.B...GOK.js

windows7-x64

10

$RECYCLE.B...GOK.js

windows10-2004-x64

10

$RECYCLE.B...KV.scr

windows7-x64

1

$RECYCLE.B...KV.scr

windows10-2004-x64

1

$RECYCLE.B...XJ.exe

windows7-x64

3

$RECYCLE.B...XJ.exe

windows10-2004-x64

3

$RECYCLE.B...6RL.js

windows7-x64

10

$RECYCLE.B...6RL.js

windows10-2004-x64

10

$RECYCLE.B...IB.exe

windows7-x64

1

$RECYCLE.B...IB.exe

windows10-2004-x64

1

$RECYCLE.B...S1.bat

windows7-x64

7

$RECYCLE.B...S1.bat

windows10-2004-x64

7

pdf-extensions.vbs

windows7-x64

3

pdf-extensions.vbs

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pdf-extension.vhd

  • Size

    16.0MB

  • MD5

    f4de49c946dea5b9557aca693bea6fd4

  • SHA1

    2a598525f8e5f88be0ab1d9cf179915bf07a38cc

  • SHA256

    a858b2b8b4be7cb23e0a7d37a0c08489a6820cb1be5523a7a466014eb994391f

  • SHA512

    063bc71bc324c688dea117bed9e42b0ef3617229a8f5069d7e78f81fbfb32c3e9374424775eb52e551def4723f4dd5697abe29dd2494c4bc0af7dbf79dbb06ef

  • SSDEEP

    24576:lSnSwh/M4YK6dJ5xA8F2nFnHb6T8Ujl6vO01C1GCTsYoQZtlsZdc40QDrUYuGG10:4SwV4kBHdTUwTGTTOWjBiO8pG+

Score
1/10

Malware Config

Signatures

Files

  • pdf-extension.vhd
    .vhd
  • out.vhd
    .vhd
  • $RECYCLE.BIN/$I3CEIPM.js
  • $RECYCLE.BIN/$I44YHS9.js
  • $RECYCLE.BIN/$I4E3GQV.js
  • $RECYCLE.BIN/$I5K4GOK.js
  • $RECYCLE.BIN/$I7M8AKV.scr
  • $RECYCLE.BIN/$IA2LBYN.js
  • $RECYCLE.BIN/$IC3SQXJ.exe
  • $RECYCLE.BIN/$ICMX6RL.js
  • $RECYCLE.BIN/$IHL25IB.exe
  • $RECYCLE.BIN/$IIN4D18.js
  • $RECYCLE.BIN/$IJXIQS1.bat
  • $RECYCLE.BIN/$IKNZUIN.js
  • $RECYCLE.BIN/$IOHUJ2V.js
  • $RECYCLE.BIN/$IPFEKS8.scr
  • $RECYCLE.BIN/$IQCRS6H.js
  • $RECYCLE.BIN/$IR4KUZJ.js
  • $RECYCLE.BIN/$IS57ED9.pif
  • $RECYCLE.BIN/$IU3LK4L.vbs
  • $RECYCLE.BIN/$IUONKGR.vbs
  • $RECYCLE.BIN/$IWZ85M3.js
  • $RECYCLE.BIN/$IXOGX0J.js
  • $RECYCLE.BIN/$IXOYXGM.js
  • $RECYCLE.BIN/$R3CEIPM.js
    .js
  • $RECYCLE.BIN/$R44YHS9.js
    .js
  • $RECYCLE.BIN/$R4E3GQV.js
    .js
  • $RECYCLE.BIN/$R5K4GOK.js
    .js
  • $RECYCLE.BIN/$R7M8AKV.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RA2LBYN.js
    .js
  • $RECYCLE.BIN/$RC3SQXJ.exe
    .exe windows x86

    ad9d11227a86b863e31ddf6019cc7ab5


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RCMX6RL.js
    .js
  • $RECYCLE.BIN/$RHL25IB.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RIN4D18.js
    .js
  • $RECYCLE.BIN/$RJXIQS1.bat
    .bat .vbs
  • $RECYCLE.BIN/$RKNZUIN.js
    .js
  • $RECYCLE.BIN/$ROHUJ2V.js
    .js
  • $RECYCLE.BIN/$RPFEKS8.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RQCRS6H.js
    .js
  • $RECYCLE.BIN/$RS57ED9.pif
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RU3LK4L.vbs
    .vbs
  • $RECYCLE.BIN/$RUONKGR.vbs
    .vbs
  • $RECYCLE.BIN/$RWZ85M3.js
    .js
  • $RECYCLE.BIN/$RXOGX0J.js
    .js
  • $RECYCLE.BIN/$RXOYXGM.js
    .js
  • $RECYCLE.BIN/desktop.ini
  • System Volume Information/IndexerVolumeGuid
  • System Volume Information/WPSettings.dat
  • pdf-extensions.vbs
    .vbs