Dropped Files | ZeroBOX

Name	b9f33d7a485ddc0d_axhub.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\axhub.dat
Size	552.0KB
Processes	1948 (3cc0e0be954dc849581f9ff1817647de.exe) 2864 (rundll32.exe)
Type	data
MD5	`3e5b02cb8b9ddb45884a6f3f078fd1a7`
SHA1	`6a5a3c980e486052d716ddfbb6d5f3fb9c49b255`
SHA256	`b9f33d7a485ddc0d8d32b8c2440493cee5481b44b76013462264631d9dd37188`
CRC32	`B00DE512`
ssdeep	`12288:N9SLN+NH0khUZY+vcvw1jG8QYewwB9gL1xBl2:N2Q2ZYuSoel9gLHBl2`
Yara	None matched
VirusTotal	Search for analysis

Name	2f4690b3c2587c0b_api-ms-win-core-namedpipe-l1-1-0.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\api-ms-win-core-namedpipe-l1-1-0.dll
Size	17.7KB
Processes	1948 (3cc0e0be954dc849581f9ff1817647de.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`87b1814412cdac3d08fad8dd3a79ebad`
SHA1	`ca1946721d023be9825a5afac4364248a56111e1`
SHA256	`2f4690b3c2587c0bfb81ab701d50e497406994613151faf007423c59ca5e2281`
CRC32	`C70F5BC3`
ssdeep	`192:9W2ubhWV/vEoOle99YOCAs/nGfe4pBjSfnVTrcw1mWYyieHaVWQ4mWPRqnaj+uBU:9WlhWwMIA0GftpBjAVkw2g6URlfD2n`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	550d4fc902f25f2a_api-ms-win-core-string-l1-1-0.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\api-ms-win-core-string-l1-1-0.dll
Size	17.7KB
Processes	1948 (3cc0e0be954dc849581f9ff1817647de.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`4c745dc13735b4822ff160cb18b61e22`
SHA1	`cdc23598548a2f1cbf9ac2ba1003b6d6af0471d0`
SHA256	`550d4fc902f25f2a0c09f475b5cecee43fb3a0a042126479560b0001db5c4891`
CRC32	`0BF31E06`
ssdeep	`384:Lx8ryMvxWlhWxaCIcPA0GftpBje0Hg604PFplpTmKYSlSSu:t8ryMvAiiRgWPF5UrSu`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8206b4b3897ca45b_axhub.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\axhub.dll
Size	73.0KB
Processes	1948 (3cc0e0be954dc849581f9ff1817647de.exe) 2864 (rundll32.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1c7be730bdc4833afb7117d48c3fd513`
SHA1	`dc7e38cfe2ae4a117922306aead5a7544af646b8`
SHA256	`8206b4b3897ca45b9e083273f616902966e57091516844906e6ae2aefe63cef1`
CRC32	`6DDF7E9E`
ssdeep	`1536:8E2T9eB25V6ohiQ5I7wgHCoNEsWv8Scdy0Je5JF:8S4ouQHXNFTy0JyJF`
Yara	PE_Header_Zero - PE File Signature Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis