Dropped Files | ZeroBOX

Name	8e07cf5e12ed7091_ymtlkqco.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\YmTlkQcO.exe
Size	571.0KB
Processes	2948 (chrome.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`406171ecbe8c3d96852acef91ec2e6db`
SHA1	`5fb7a4fc46659b510fbcbb51d9e08bdf08490b62`
SHA256	`8e07cf5e12ed70918b410fdb95fdf6905c191df169df5fdf994daac99c8bd359`
CRC32	`1209479E`
ssdeep	`12288:B5tM+E02iNv4sxxrMAbU3Sg9r28R1g9lHQI0uS:vbE01usjMMuSg96WIjV`
Yara	Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult IsPE32 - (no description) Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	915d20ee8d175c9c_tmpE48C.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpE48C.tmp
Size	1.6KB
Processes	2948 (chrome.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`b0a9f2361a3fa4a8fd59327b39902986`
SHA1	`fd401e756fd408aa0d53ddf43312dddfb78a7e9d`
SHA256	`915d20ee8d175c9caf8529a22b28a7207f771ff3b01350909e4f0bdd392be315`
CRC32	`9F650987`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBTItn:cbhf7IlNQQ/rydbz9I3YODOLNdq3pu`
Yara	None matched
VirusTotal	Search for analysis