Dropped Files | ZeroBOX

Name	72fe0dac46c595fa_yknhllzpit.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsi6173.tmp\yknhllzpit.dll
Size	155.0KB
Processes	2416 (loader1.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`99785fae0cd2d5028bcb75a809df579b`
SHA1	`643dbde0c64fc1d9fc08e8d8ba521a818cd0de42`
SHA256	`72fe0dac46c595fadefce76828e21b17a14606b94c1e2d16c2d581c235d5145b`
CRC32	`C9FCA5AA`
ssdeep	`3072:A0ips9nf3UBxPW1z9oxrrBmBNIRTUDjJMfEhU9HciT7:vO5PUDcL`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library
VirusTotal	Search for analysis

Name	6b86b273ff34fce1_6D6F4D.lck Submit file
Filepath	C:\Users\test22\AppData\Roaming\41D896\6D6F4D.lck
Size	1.0B
Processes	1824 (loader1.exe)
Type	very short file (no magic)
MD5	`c4ca4238a0b923820dcc509a6f75849b`
SHA1	`356a192b7913b04c54574d18c28d46e6395428ab`
SHA256	`6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b`
CRC32	`83DCEFB7`
ssdeep	`3:U:U`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsd6153.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsd6153.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	b3d7029ff9654bcb_bk9u103zrqfqkjlikaqq Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\bk9u103zrqfqkjlikaqq
Size	213.4KB
Processes	2416 (loader1.exe)
Type	data
MD5	`45311152ec0035318dfb96f7b8b3c02b`
SHA1	`8a0fb7d8fff4186e0734ac440c260c154835c3ee`
SHA256	`b3d7029ff9654bcb672ebc84dc7216cfad1ab55521f9f34e7bdf67d0246730ab`
CRC32	`294298FA`
ssdeep	`3072:Sxr/83nPip442K/46gaa75dzyah7kZyHAEuRKI1VKm0BqVG7SWnjoEbRL0joSS1f:2rUnai4J46gaa1n2AsvK3B1jwk91NF/n`
Yara	None matched
VirusTotal	Search for analysis