Dropped Files | ZeroBOX

Name	8585a84e3ed22819_svchost32.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\svchost32.exe
Size	22.5KB
Processes	1852 (eth.exe) 2088 (cmd.exe)
Type	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5	`d20044e353c787a869f49f63b11b5a26`
SHA1	`9fe8264d8fa9d90e7846e588093d8cd1045984e6`
SHA256	`8585a84e3ed228198cc6f0355b035a84116fdcb9586dc6d6c64139c6f5ccc99f`
CRC32	`8F85A594`
ssdeep	`384:czF/EqeUACKdtCrYG/6G0wFSah55/YDCYw2Nnk/TNKPfYZwi9K6w2HkDm/dS9yjb:8zWsrYs7x+Nnk/TN19fkDfwhB3k`
Yara	PE_Header_Zero - PE File Signature IsPE64 - (no description) Generic_Malware_Zero - Generic Malware Malicious_Packer_Zero - Malicious Packer Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal	Search for analysis

Name	9d3d13c55b2614c0_590aee7bdd69b59b.customDestinations-ms~RF209eeaf.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF209eeaf.TMP
Size	7.8KB
Processes	2744 (powershell.exe) 2392 (powershell.exe)
Type	data
MD5	`3eb6fb80f9dbbc1201de9e762252141b`
SHA1	`c6d1e6ea5f2fef6f4458695b8ed7586aed429f1c`
SHA256	`9d3d13c55b2614c0615acea119139123b2a29f2a0daded7edd5146e4614a78e6`
CRC32	`23B7285A`
ssdeep	`96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCwor/tDHXyWlUVul:YtzXo9tzbHnorlTyo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	1b33b72ab0b0ce2b_590aee7bdd69b59b.customDestinations-ms~RF20a8a53.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF20a8a53.TMP
Size	7.8KB
Processes	2428 (powershell.exe) 1772 (powershell.exe)
Type	data
MD5	`cc365faeb1e62520db71c76693b5bd4d`
SHA1	`c30e82baeaf469aa2ad471bb1babad3fbf32b689`
SHA256	`1b33b72ab0b0ce2b124a0cd09c7dbdb0ca087427bfda022c1f0e584f26d7f7d5`
CRC32	`8CBE6E8A`
ssdeep	`96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCworeutDHXyWlUVul:YtzXo9tzbHnoreeTyo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis