Dropped Files | ZeroBOX

Name	3fe37490e43b3bbb_sqlite.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\sqlite.dll
Size	80.0KB
Processes	2204 (2201.exe) 2416 (rundll32.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f7c2849c7a99577986f62500808413de`
SHA1	`24ec25a380b470aa4b752d964ad206d35603b04e`
SHA256	`3fe37490e43b3bbbd45e4da4c8946c0566c0ee72586707bf4e93834615df80db`
CRC32	`C965AEA2`
ssdeep	`1536:hCF3Y1dpl/MXQgXmlyWY20VdkALnCo5sWzcdG5mgBupxM6//:hMuh/YXmlT76LnH2GEgBupxM6//`
Yara	Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) UPX_Zero - UPX packed file IsPE32 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	be449f187ec6ee4c_sqlite.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\sqlite.dat
Size	565.1KB
Processes	2204 (2201.exe) 2416 (rundll32.exe)
Type	data
MD5	`c78bf51ee294161707a6766e71cee582`
SHA1	`3bb4ff0b06fc5b3753ab39f21e959895834bf7f8`
SHA256	`be449f187ec6ee4c4fa40642e698ffa3bfa19ec08848f4e0273b70427a1f1fc2`
CRC32	`EA889173`
ssdeep	`12288:C11ticqWIMMXa2ad3KNjZi+VUYgokNxcg8aVg1gKtY7SQgCO:ePeBaRKNjoklalbVygKtY7xgd`
Yara	None matched
VirusTotal	Search for analysis