Overview

overview

3

Static

static

3

pdf-extens...er.vhd

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    pdf-extension_installer.zip

  • Size

    738KB

  • MD5

    9d1a17f1951bd6527403cc7b2e34c670

  • SHA1

    504c6e8b7a51c40d17879e6b0dd60e563fc1e182

  • SHA256

    79adebaaa691a23085fc427ba413ad3b6a30802c9781de5ebf7c51dde34513f0

  • SHA512

    7dddc43f4432bf770df4cbb7b706e901b1e8b125fe83877ecdca6c0b381891dbf523496d9e6853fc3eca855f44d491cbe6b45a75faf2b8cf609c2a5d8e4f8cf9

  • SSDEEP

    12288:/a6wBENo52MM+D1vvUsk+lMCc6CLJXDRpY4el5iE1jFj13YFP:C6wBENoYMM+BvcsrwZtNpYf33ZlSP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • pdf-extension_installer.zip
    .zip
  • pdf-extension_installer.vhd
    .vhd
  • $RECYCLE.BIN/$I008WO4.lnk
  • $RECYCLE.BIN/$I2J8H52.lnk
  • $RECYCLE.BIN/$I3BA140.bat
  • $RECYCLE.BIN/$I3CEIPM.js
  • $RECYCLE.BIN/$I4E3GQV.js
  • $RECYCLE.BIN/$I60DVVJ.js
  • $RECYCLE.BIN/$I7M8AKV.scr
  • $RECYCLE.BIN/$IA2LBYN.js
  • $RECYCLE.BIN/$IAWAR5N.lnk
  • $RECYCLE.BIN/$ICMX6RL.js
  • $RECYCLE.BIN/$IF3VQJF.bat
  • $RECYCLE.BIN/$IHL25IB.exe
  • $RECYCLE.BIN/$IJXIQS1.bat
  • $RECYCLE.BIN/$IOHUJ2V.js
  • $RECYCLE.BIN/$IPFEKS8.scr
  • $RECYCLE.BIN/$IQCRS6H.js
  • $RECYCLE.BIN/$IQPYQN4.js
  • $RECYCLE.BIN/$IR4KUZJ.js
  • $RECYCLE.BIN/$IUCYNED.bat
  • $RECYCLE.BIN/$IWHTOYR.vbs
  • $RECYCLE.BIN/$IWZ85M3.js
  • $RECYCLE.BIN/$IXOGX0J.js
  • $RECYCLE.BIN/$IXOYXGM.js
  • $RECYCLE.BIN/$R008WO4.lnk
    .lnk
  • $RECYCLE.BIN/$R2J8H52.lnk
    .lnk
  • $RECYCLE.BIN/$R3BA140.bat
  • $RECYCLE.BIN/$R3CEIPM.js
    .js
  • $RECYCLE.BIN/$R4E3GQV.js
    .js
  • $RECYCLE.BIN/$R60DVVJ.js
    .js
  • $RECYCLE.BIN/$R7M8AKV.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RA2LBYN.js
    .js
  • $RECYCLE.BIN/$RAWAR5N.lnk
    .lnk
  • $RECYCLE.BIN/$RCMX6RL.js
    .js
  • $RECYCLE.BIN/$RF3VQJF.bat
  • $RECYCLE.BIN/$RHL25IB.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RJXIQS1.bat
    .bat .vbs
  • $RECYCLE.BIN/$ROHUJ2V.js
    .js
  • $RECYCLE.BIN/$RPFEKS8.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $RECYCLE.BIN/$RQCRS6H.js
    .js
  • $RECYCLE.BIN/$RQPYQN4.js
    .js
  • $RECYCLE.BIN/$RUCYNED.bat
  • $RECYCLE.BIN/$RWHTOYR.vbs
    .vbs
  • $RECYCLE.BIN/$RWZ85M3.js
    .js
  • $RECYCLE.BIN/$RXOGX0J.js
    .js
  • $RECYCLE.BIN/$RXOYXGM.js
    .js
  • $RECYCLE.BIN/desktop.ini
  • System Volume Information/IndexerVolumeGuid
  • System Volume Information/WPSettings.dat
  • pdf-extension.bat