Dropped Files | ZeroBOX

Name	d113bab75f18c9f6_remotecmd - 3.0.cmd Submit file
Filepath	C:\Windows\Temp\RemoteCMD - 3.0.cmd
Size	1.3KB
Processes	180 (RemoteCMD - 3.0.exe)
Type	ASCII text, with CRLF line terminators
MD5	`07615435bd2c58604ee1b39a8b5a4490`
SHA1	`581c87f76c17de36c479db92606f95f44d52ebde`
SHA256	`d113bab75f18c9f69121a30c2a560cbc25ea6249dc0626570af885d5bc7791b5`
CRC32	`EA066BA3`
ssdeep	`12:CF1Qhz1QdqKuuyUkWRA/PRy+YJ3MgksxEkyzfP2prT8ofj0X5amRfj0DTq:Nhe3u/UkfPRy1tMgks2keOlZwXI4wDe`
Yara	None matched
VirusTotal	Search for analysis

Name	03d6c3f49570eb31_psexec.exe Submit file
Filepath	C:\Windows\Temp\psexec.exe
Size	229.0KB
Processes	180 (RemoteCMD - 3.0.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`78a2c9d79c21ddfcb7ced32f5ebec618`
SHA1	`7dd2cd890f5b00721c32d9fbede24d15e3e823e8`
SHA256	`03d6c3f49570eb314838c09b429081c792ed143664981ebae386f2329429dab6`
CRC32	`4F4E1CA8`
ssdeep	`3072:4OplYzgzb5OjsUGTLl+hycT5S4WVm1WDXx7x2pju1p5hhV8HafOafa:Vdzb5VTg1c4WVm1WDXzuy1JRzS`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware IsPE32 - (no description) Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_RemoteCMD - 3.0.cmd Empty file or file not found
Filepath	C:\Windows\Temp\RemoteCMD - 3.0.cmd
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis