Dropped Files | ZeroBOX

Name	f9349585a2393d43_4cyffnbgv9lsnvkncd4cv4aa.exe Submit file
Filepath	C:\Users\Administrator\AppData\Roaming\4cyffNBgV9LsnVkncd4CV4aa.exe
Size	494.0KB
Processes	6816 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	efab7848df520681_jzwlhftdcirb4n0aanxy3uil.exe Submit file
Filepath	C:\Users\Administrator\AppData\Roaming\jzwLhftDCiRb4N0AAnXY3Uil.exe
Size	4.3KB
Processes	6816 (china.png)
Type	HTML document, ASCII text
MD5	`a0fc119ff8e6e9fe98e0a31e60885f4a`
SHA1	`60b2cada493ac820d2e0e244d29558172ee8fc89`
SHA256	`efab7848df520681985a72b2bbb1c2f5547a3794b6db91d5e26095f4cfe55cec`
CRC32	`DB552C15`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsiSsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmiSsgsf0`
Yara	None matched
VirusTotal	Search for analysis

Name	06d61c23e6ca59b9_scsE05D.tmp Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\scsE05D.tmp
Size	139.0B
Processes	3588 (ntvdm.exe)
Type	DOS batch file, ASCII text, with CRLF line terminators
MD5	`4c361dea398f7aeef49953bdc0ab4a9b`
SHA1	`089c79827da035272d8766e18a3f824385a5a057`
SHA256	`06d61c23e6ca59b9ddad1796eccc42c032cd8f6f424af6cfee5d085d36ff7dfd`
CRC32	`64413515`
ssdeep	`3:mKDDaNF7cAI1cACovDF7cAIn6iJNVcAISU+1KVLvvn:hONecovDFoIiKUUOKvvn`
Yara	None matched
VirusTotal	Search for analysis

Name	81129046a3090673_scsE04C.tmp Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\scsE04C.tmp
Size	174.0B
Processes	3588 (ntvdm.exe)
Type	ASCII text, with CRLF line terminators
MD5	`e7101171485995a16663698afdba838d`
SHA1	`b213c0dcae2b0e61d340f0aa1f8f1850dc858230`
SHA256	`81129046a309067311299dc5e06e6ae8b88bad1e0a1b1e1b15908c81044644d1`
CRC32	`CD8E3E0F`
ssdeep	`3:ozS2AGeycAI6bvbIosG/RZnicJoscAILlKbmSrUYeYV9/cfhAINn:qTjtc8/RZnicCscRlOmweYVRcfhfn`
Yara	None matched
VirusTotal	Search for analysis