popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name eacd09517ce90d34_f7juhkryu4[1].exeXzone.identifier
Submit file
Filepath C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CF0IKJEB\f7juhkryu4[1].exe:Zone.Identifier
Size 26.0B
Processes 5400 (iexplore.exe)
Type ASCII text, with CRLF line terminators
MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
CRC32 1A3F8C48
ssdeep 3:gAWY3n:qY3n
Yara None matched
VirusTotal Search for analysis
Name dee4bb7d46bbbec6_f7juhkryu4[1].exe
Submit file
Filepath C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CF0IKJEB\f7juhkryu4[1].exe
Size 266.5KB
Processes 5400 (iexplore.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 270c3859591599642bd15167765246e3
SHA1 e227a8a338166dc97e360ca9cddda5e007079c58
SHA256 dee4bb7d46bbbec6c01dc41349cb8826b27be9a0dcf39816ca8bd6e0a39c2019
CRC32 D9D2C587
ssdeep 6144:Rxa4Hg2gf0jOrkOWnNwZvbMoq2T4qi+AHPHrr:JHg727Nwyo9Av/
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Ficker_Stealer_Zero - Ficker Stealer
VirusTotal Search for analysis
Name 5b2c34b3c4e8dd89_search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico
Submit file
Filepath C:\Users\Administrator\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Size 4.2KB
Processes 5224 (iexplore.exe)
Type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
MD5 da597791be3b6e732f0bc8b20e38ee62
SHA1 1125c45d285c360542027d7554a5c442288974de
SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
CRC32 4527A2F2
ssdeep 24:suZOWcCXPRS4QAUs/KBy3TYI42Apvl6wheXpktCH2Yn4KgISQggggFpz1k9PAYHu:HBRh+sCBykteatiBn4KWi1+Ne
Yara None matched
VirusTotal Search for analysis
Name 2d939b5aee78649b_kaosdma.txt
Submit file
Filepath C:\ProgramData\kaosdma.txt
Size 15.0B
Processes 3016 (f7juhkryu4[1].exe)
Type ASCII text, with no line terminators
MD5 f8bbb031d638ee9ad641d31dcf876ceb
SHA1 3e8ab5f4a8497d4ddbdc0c85409fd8ad85d36d9a
SHA256 2d939b5aee78649ba5dcf483ea0aaa5e19e86948b4778e339f04998c89927566
CRC32 DFD5C328
ssdeep 3:Lb+:/+
Yara None matched
VirusTotal Search for analysis
Name fbf18ae3adfa319d_frameiconcache.dat
Submit file
Filepath C:\Users\Administrator\AppData\Local\Microsoft\Internet Explorer\frameiconcache.dat
Size 9.0KB
Processes 5224 (iexplore.exe)
Type data
MD5 11c8b899c2651d14dd0d4119a9473ba8
SHA1 8e412b9d3d168475c4d004312835d4fac6ddfc69
SHA256 fbf18ae3adfa319d9a31df39f0227c5dfa14877aaa0fd16804948b0757a81bbe
CRC32 BBC35215
ssdeep 12:vcOM01QF6vEMXAt+prwMk6wNFutU/f2me0Q3iiIDwfUGM0zjfftYw4tOYIR1GQmK:vqcEMXIgrmNU27VQ3iiR20zSw4Pm4
Yara None matched
VirusTotal Search for analysis