Dropped Files | ZeroBOX

Name	a39b49f0b8856070_zvgswzwvg.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\zVGSWzWVG.exe
Size	731.0KB
Processes	7180 (navy.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`10658be2265bb9cdebd98f80c6449d7f`
SHA1	`032d1c42a6b4f2f980642973f922581e244067f4`
SHA256	`a39b49f0b8856070b1b7da01856311eb0177aed315e1f93402681ea256f8c11e`
CRC32	`64671C6A`
ssdeep	`12288:woLLoS60/K7yh0TH7j9iP2DEMkvdd4JPsCAXKNIYSFl:woLATHViP2DEMcdd4x/A6`
Yara	Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c8487416b24b8b61_tmpC53.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpC53.tmp
Size	1.6KB
Processes	7180 (navy.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`3f79d704a6c3de83b3b81d6d0a4a2aa7`
SHA1	`43fed346d2aa07d05715ddeab90f915f030e1b8c`
SHA256	`c8487416b24b8b61dba6523eba31db1b19c91ef33498d319288f2cb8316fa938`
CRC32	`867592F5`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB/Ptn:cbhf7IlNQQ/rydbz9I3YODOLNdq3VF`
Yara	None matched
VirusTotal	Search for analysis