Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	24222300c78180b5_Trast.bat Submit file
Filepath	C:\Users\Public\Trast.bat
Size	34.0B
Processes	2020 (escrow.exe)
Type	ASCII text, with no line terminators
MD5	`4068c9f69fcd8a171c67f81d4a952a54`
SHA1	`4d2536a8c28cdcc17465e20d6693fb9e8e713b36`
SHA256	`24222300c78180b50ed1f8361ba63cb27316ec994c1c9079708a51b4a1a9d810`
CRC32	`7F4F9BF9`
ssdeep	`3:LjTnaHF5wlM:rnaHSM`
Yara	None matched
VirusTotal	Search for analysis

Name	6c51ef2bd54821a1_nest Submit file
Filepath	C:\Users\Public\nest
Size	9.0B
Processes	2020 (escrow.exe)
Type	ASCII text, with CRLF line terminators
MD5	`a8cb12fd0fdf21f33af2c135dff34a4d`
SHA1	`7cd893e91b625a3192bfb57768d0e3fdd8061db0`
SHA256	`6c51ef2bd54821a105a57ace9117b2e6b0be8e3633c7be9c17701aca043697f9`
CRC32	`28FA48B9`
ssdeep	`3:fNfK:lC`
Yara	None matched
VirusTotal	Search for analysis

Name	a21bf1315b66f3f8_zzyspky.url Submit file
Filepath	C:\Users\Public\Libraries\zzyspkY.url
Size	96.0B
Processes	2020 (escrow.exe)
Type	MS Windows 95 Internet shortcut text (URL=<file:"C:\\Users\\Public\\Libraries\\Ykpsyzz\\Ykpsyzz.exe">), ASCII text, with CRLF line terminators
MD5	`c15a873abfe87cbfcbd6d09936ccbd63`
SHA1	`e71bca9a5da1580f12779d207693fa295e4c28d2`
SHA256	`a21bf1315b66f3f8be73142438ffbef59abab2ca17ed0de1bb41426cf8e117a4`
CRC32	`FC21EA8D`
ssdeep	`3:HRAbABGQYmTWAX+rSF55i0XMZ8rvsGKd6ov:HRYFVmTWDyzU0vsbDv`
Yara	None matched
VirusTotal	Search for analysis

Name	37c59c8398279916_KDECO.bat Submit file
Filepath	C:\Users\Public\KDECO.bat
Size	155.0B
Processes	2020 (escrow.exe)
Type	ASCII text, with no line terminators
MD5	`213c60adf1c9ef88dc3c9b2d579959d2`
SHA1	`e4d2ad7b22b1a8b5b1f7a702b303c7364b0ee021`
SHA256	`37c59c8398279916cfce45f8c5e3431058248f5e3bef4d9f5c0f44a7d564f82e`
CRC32	`42292F53`
ssdeep	`3:LjT5LJJFIf9oM3KN6QNb3DM9bWQqA5SkrF2VCceGAFddGeWLCXlRA3+OR:rz81R3KnMMQ75ieGgdEYlRA/R`
Yara	None matched
VirusTotal	Search for analysis

Name	da3b4c6a3fc81e73_ykpsyzz.exe Submit file
Filepath	C:\Users\Public\Libraries\Ykpsyzz\Ykpsyzz.exe
Size	702.0KB
Processes	2020 (escrow.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`4568267da235d998580cfd9d8b828715`
SHA1	`50f2d92f29a6189ec28429d38e8ed01f2d6445d6`
SHA256	`da3b4c6a3fc81e733843987e557efb53beab50fa9ad528aa1a0d7a0f0e1c6e94`
CRC32	`85B43874`
ssdeep	`12288:mftAn+lE3hGAJNmUaxoSThjcymQgMM4PW:4uwEwomU1SFABD`
Yara	UPX_Zero - UPX packed file Admin_Tool_IN_Zero - Admin Tool Sysinternals PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f35f2658455a2e40_UKO.bat Submit file
Filepath	C:\Users\Public\UKO.bat
Size	250.0B
Processes	2020 (escrow.exe)
Type	ASCII text, with CRLF line terminators
MD5	`eaf8d967454c3bbddbf2e05a421411f8`
SHA1	`6170880409b24de75c2dc3d56a506fbff7f6622c`
SHA256	`f35f2658455a2e40f151549a7d6465a836c33fa9109e67623916f889849eac56`
CRC32	`8C4E367F`
ssdeep	`6:rgnMXd1CQnMXd1COm8hnaHNHIXUnMXd1CoD9c1uOw1H1gOvOBAn:rgamIHIXUaXe1uOeVqy`
Yara	None matched
VirusTotal	Search for analysis

Name	45aa3957c2986526_nest.bat Submit file
Filepath	C:\Users\Public\nest.bat
Size	53.0B
Processes	2020 (escrow.exe)
Type	ASCII text, with CRLF line terminators
MD5	`8ada51400b7915de2124baaf75e3414c`
SHA1	`1a7b9db12184ab7fd7fce1c383f9670a00adb081`
SHA256	`45aa3957c29865260a78f03eef18ae9aebdbf7bea751ecc88be4a799f2bb46c7`
CRC32	`989CB101`
ssdeep	`3:LjT9fnMXdemzCK0vn:rZnMXd1CV`
Yara	None matched
VirusTotal	Search for analysis