General

  • Target

    invoice.vhd

  • Size

    18.0MB

  • MD5

    8aa7859f1d6f56bb1d077b28134f5e06

  • SHA1

    5db3b86166730fa4f0eaa619c1c533710bc2256a

  • SHA256

    72ba4bd27c5d95912ac5e572849f0aaf56c5873e03f5596cb82e56ac879e3614

  • SHA512

    19d734729910e94805389b9392086f03be1bf56e542961c73dce1ff1e1b2a005cc655813073e41946a9ec8a1e5621031ae73b5cd884f5d3b77b52cc57797fa3f

  • SSDEEP

    24576:wS5Sjh/M4YK6dJ5oA8F2nFnHb6T8Ujl6vO01C1GCTsYoQZtlsZdc40QDrUYuGG1p:B0jVBkBHdTUwTGTTOWjBiO8pG+C3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • invoice.vhd
    .vhd
  • out.vhd
    .vhd
  • $RECYCLE.BIN/$I2WRCTB.lnk
  • $RECYCLE.BIN/$I3CEIPM.js
  • $RECYCLE.BIN/$I3CF2C6.js
  • $RECYCLE.BIN/$I44YHS9.js
  • $RECYCLE.BIN/$I4E3GQV.js
  • $RECYCLE.BIN/$I5K4GOK.js
  • $RECYCLE.BIN/$I7M8AKV.scr
  • $RECYCLE.BIN/$IA2LBYN.js
  • $RECYCLE.BIN/$IC3SQXJ.exe
  • $RECYCLE.BIN/$ICMX6RL.js
  • $RECYCLE.BIN/$IHL25IB.exe
  • $RECYCLE.BIN/$IIN4D18.js
  • $RECYCLE.BIN/$IJXIQS1.bat
  • $RECYCLE.BIN/$IKNZUIN.js
  • $RECYCLE.BIN/$ILCPGGH.vbs
  • $RECYCLE.BIN/$IOHUJ2V.js
  • $RECYCLE.BIN/$IPFEKS8.scr
  • $RECYCLE.BIN/$IQBT6RP.vbs
  • $RECYCLE.BIN/$IQCRS6H.js
  • $RECYCLE.BIN/$IR4KUZJ.js
  • $RECYCLE.BIN/$IS57ED9.pif
  • $RECYCLE.BIN/$IU3LK4L.vbs
  • $RECYCLE.BIN/$IUONKGR.vbs
  • $RECYCLE.BIN/$IUX08ML.pif
  • $RECYCLE.BIN/$IWZ85M3.js
  • $RECYCLE.BIN/$IXOGX0J.js
  • $RECYCLE.BIN/$IXOYXGM.js
  • $RECYCLE.BIN/$R2WRCTB.lnk
    .lnk
  • $RECYCLE.BIN/$R3CEIPM.js
    .js
  • $RECYCLE.BIN/$R3CF2C6.js
    .js
  • $RECYCLE.BIN/$R44YHS9.js
    .js
  • $RECYCLE.BIN/$R4E3GQV.js
    .js
  • $RECYCLE.BIN/$R5K4GOK.js
    .js
  • $RECYCLE.BIN/$R7M8AKV.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RA2LBYN.js
    .js
  • $RECYCLE.BIN/$RC3SQXJ.exe
    .exe windows x86

    ad9d11227a86b863e31ddf6019cc7ab5


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RCMX6RL.js
    .js
  • $RECYCLE.BIN/$RHL25IB.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RIN4D18.js
    .js
  • $RECYCLE.BIN/$RJXIQS1.bat
    .bat .vbs
  • $RECYCLE.BIN/$RKNZUIN.js
    .js
  • $RECYCLE.BIN/$RLCPGGH.vbs
    .vbs
  • $RECYCLE.BIN/$ROHUJ2V.js
    .js
  • $RECYCLE.BIN/$RPFEKS8.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RQBT6RP.vbs
    .vbs
  • $RECYCLE.BIN/$RQCRS6H.js
    .js
  • $RECYCLE.BIN/$RS57ED9.pif
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RU3LK4L.vbs
    .vbs
  • $RECYCLE.BIN/$RUONKGR.vbs
    .vbs
  • $RECYCLE.BIN/$RUX08ML.pif
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RWZ85M3.js
    .js
  • $RECYCLE.BIN/$RXOGX0J.js
    .js
  • $RECYCLE.BIN/$RXOYXGM.js
    .js
  • $RECYCLE.BIN/desktop.ini
  • System Volume Information/IndexerVolumeGuid
  • System Volume Information/WPSettings.dat
  • invoice.pdf.lnk
    .lnk