Vho: Trojan. Win32. Injuke

What is VHO:Trojan.Win32.Injuke infection?

In this post you will find regarding the definition of VHO:Trojan.Win32.Injuke and also its adverse influence on your computer. Such ransomware are a type of malware that is elaborated by on-line fraudulences to require paying the ransom by a victim.

Most of the situations, VHO:Trojan.Win32.Injuke ransomware will certainly advise its targets to launch funds transfer for the function of neutralizing the changes that the Trojan infection has actually introduced to the sufferer’s gadget.

VHO:Trojan.Win32.Injuke Summary

These adjustments can be as complies with:

  • Executable code extraction;
  • Creates RWX memory;
  • Unconventionial language used in binary resources: Serbian;
  • The binary likely contains encrypted or compressed data.;
  • Detects Sandboxie through the presence of a library;
  • Detects Avast Antivirus through the presence of a library;
  • Network activity detected but not expressed in API logs;
  • Ciphering the documents located on the target’s disk drive — so the sufferer can no more make use of the information;
  • Preventing regular accessibility to the victim’s workstation;

Related domains:

z.whorecord.xyzWin32:RansomX-gen [Ransom]
a.tomx.xyzWin32:RansomX-gen [Ransom]

VHO:Trojan.Win32.Injuke

One of the most typical channels whereby VHO:Trojan.Win32.Injuke Trojans are injected are:

  • By ways of phishing emails;
  • As a consequence of customer ending up on a source that holds a destructive software application;

As soon as the Trojan is effectively injected, it will either cipher the data on the victim’s PC or avoid the tool from working in a correct way – while also putting a ransom money note that discusses the demand for the victims to impact the repayment for the objective of decrypting the files or recovering the documents system back to the first problem. In many instances, the ransom note will turn up when the client restarts the COMPUTER after the system has actually currently been damaged.

VHO:Trojan.Win32.Injuke circulation networks.

In different edges of the globe, VHO:Trojan.Win32.Injuke expands by leaps as well as bounds. However, the ransom money notes and methods of obtaining the ransom quantity may vary depending upon specific local (local) setups. The ransom notes as well as methods of obtaining the ransom amount may differ depending on specific local (local) setups.

As an example:

    Faulty informs concerning unlicensed software program.

    In particular areas, the Trojans often wrongfully report having actually spotted some unlicensed applications allowed on the target’s device. The alert after that requires the individual to pay the ransom money.

    Faulty declarations about unlawful web content.

    In nations where software piracy is much less preferred, this technique is not as efficient for the cyber fraudulences. Additionally, the VHO:Trojan.Win32.Injuke popup alert may incorrectly declare to be originating from a law enforcement establishment and will report having located child pornography or various other unlawful information on the device.

    VHO:Trojan.Win32.Injuke popup alert may falsely declare to be deriving from a regulation enforcement organization and will report having located kid porn or other unlawful information on the tool. The alert will in a similar way contain a need for the customer to pay the ransom money.

Technical details

File Info:

crc32: 207C9BCFmd5: 1223c239b1761518c640dc7f2ae0224ename: 1223C239B1761518C640DC7F2AE0224E.mlwsha1: 30f0389603c7fd2f80e1fe2c9efc9169dd5a5b53sha256: 4fc2c92c37d7890c00156bfe696f3df34aa62409f5c7cdea404f2c7258d7adb2sha512: 20a7ac237ff6497338cfcec8d18280512f1863840fe32d9273733ecbe27cdc64592ec4cc0b08e921e57a870f7432d25bb486d024b021914fe26eacc365a749d3ssdeep: 3072:xI4Su0t4XYZPtI69UKR1Td/Ff1T+huCfma/pJaDHdZ:W4SuNXYFmK3zTimaBJaPtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: voygcuadoge.exeFileVersion: 11.3.67.15Copyright: Copyrighz (C) 2020, wodkagudsProductVersion: 50.11.20.78Translation: 0x0274 0x0119

VHO:Trojan.Win32.Injuke also known as:

GridinSoftTrojan.Ransom.Gen
BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious ()
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
Cybereasonmalicious.603c7f
CyrenW32/Kryptik.EMQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyVHO:Trojan.Win32.Injuke.gen
SophosML/PE-A
FireEyeGeneric.mg.1223c239b1761518
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Azorult!ml
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.90 (RDML:4f2erkcARo4Dqacu7fFu1A)
IkarusTrojan-Spy.MSIL.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.ERHN!tr
AVGWin32:RansomX-gen [Ransom]
Qihoo-360HEUR/QVM10.1.A85F.Malware.Gen
Sarah Jenkins

Sarah Jenkins

Senior Technology Editor & AI Specialist

Sarah Jenkins is a veteran tech journalist with over 12 years of experience covering artificial intelligence, mobile innovations, and digital ethics. Her insights have appeared in leading technology publications worldwide.

Share this article
Twitter Facebook Pinterest