Dropped Files | ZeroBOX
Name 8b339f7baba0ebf4_s3lwtg3ws1jbk7zir
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\s3lwtg3ws1jbk7zir
Size 210.0KB
Processes 2768 (vbc.exe)
Type data
MD5 21791ac09ccbbf08222f15ef366fdcae
SHA1 66f1d48b80adc6ec2def0e4ec5c6cf91a5dfa3b2
SHA256 8b339f7baba0ebf466e1fb8a5e1967f15ab2a4596458c965d69e7fc6ec476e33
CRC32 73E28B25
ssdeep 3072:DJu5xoy6XYBTCdGB0TodUSvGYwOphmLLK9xv2TyxFx14+ALDx40Z4a5H2KPROaE6:0oy6IBGdM00+Set4sLLopxFPz6toaA72
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nspDF25.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nspDF25.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 527aaff202f2a986_vtlgn.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nszDF64.tmp\vtlgn.dll
Size 101.0KB
Processes 2768 (vbc.exe)
Type PE32 executable (DLL) (native) Intel 80386, for MS Windows
MD5 2a18df5ee272a3be4f40c181c5ba4131
SHA1 b71a41ecf4f0860f1dfadd3fe1563b4cd58d13b4
SHA256 527aaff202f2a9867481a07d96fa6a6741460d14dac6891ad0990fe1716aee5b
CRC32 2B824B3E
ssdeep 1536:AFfNYYWj0LzHlNbsyD3Zz/hlPbwoRwGZ3ralsWjcddPbUF5Lm7Cm:AFBcwpHPYKdPb0SH
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis