Dropped Files | ZeroBOX

Name	6aff20860490b7c3_tmp74D6.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp74D6.tmp
Size	1.6KB
Processes	1016 (Producto.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`46849d80bee947b19315c87dc4c702ae`
SHA1	`bc3c44e809eb700e0140943a63e6ca4e32294c23`
SHA256	`6aff20860490b7c36edada6d900597f33ac165e6903988eeb94bec8a2aa7c476`
CRC32	`F6C84A5A`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBBtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3J`
Yara	None matched
VirusTotal	Search for analysis

Name	99fb7d169feae6b6_hgjajpllauzo.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\HGjaJPLlauzO.exe
Size	994.0KB
Processes	1016 (Producto.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`964bd83c36b8ec52a37dc9dc4b5a457e`
SHA1	`41817335cc53d9e379901c8d1e84907e3ead924d`
SHA256	`99fb7d169feae6b6545ce100ee721083b0caf550973a8475b1067b79fb43ab07`
CRC32	`BEE4ED72`
ssdeep	`12288:Yre9VNoLLoS60/K7yh0FSF5xQsTCLTDb9Smul/6nU8DGuQivjWjRYzxGR02BZw02:seRoLAF6MsuX9hnty/ivSjcQR0eecH`
Yara	Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Is_DotNET_EXE - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis