Dropped Files | ZeroBOX

Name	06ad5e6dcc324c40_bxbbuls.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsx5FAE.tmp\bxbbuls.dll
Size	93.5KB
Processes	2948 (mx.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`8af6169923c16bf682e6df75c2270e32`
SHA1	`a42a793e6a866b6b2e9abbfbacd1e8b8b51e4f42`
SHA256	`06ad5e6dcc324c40d5722809a09d2c58668d3f7910244070341efb444f246b83`
CRC32	`3EA8F670`
ssdeep	`1536:YosmQsu0GF/i7Tc1ONlP607GCWyF9c83EEwvKpsWjcdiNUfCwGUiq:vhF7A1OPqyR3E/CWiN7wx`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsc5F7E.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsc5F7E.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	449c6decfd0c9ca3_en9duabwlwieg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\en9duabwlwieg
Size	213.2KB
Processes	2948 (mx.exe)
Type	data
MD5	`9ce9a853a2c2b0abb20305a4b91ce538`
SHA1	`dcf0627a2190b571397327ab09dddd7d94873c41`
SHA256	`449c6decfd0c9ca33265c64afad1352b1b2fc9b36ba143eacc95ca828107caa2`
CRC32	`69B5E34C`
ssdeep	`6144:1M+Ort1hlyDNy6MFE/t4g5PnHo9f+O3LW/:+Zt1PqVMF0tHEfL3K`
Yara	None matched
VirusTotal	Search for analysis