Dropped Files | ZeroBOX

Name	7d29ff32379efd3a_lmuikptdl.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\lmuIkPtdL.exe
Size	680.0KB
Processes	2760 (wpx.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`f1e2b815c21532a42ed362eb821c6671`
SHA1	`aaa944ad4be909b9b6fb282d7c770212af7445c8`
SHA256	`7d29ff32379efd3a3ee28d4204ebf7515025b86a4bdd7bd59a577ef1f6c9a2ba`
CRC32	`2D5FC167`
ssdeep	`12288:1gf2XoY9CcfxiNxFKLIMnCSlqdHs1TZWub0Qsb/hyDVebA:1geXoY9UNfKLnBkHs1T8G/sb/hyDVeb`
Yara	Admin_Tool_IN_Zero - Admin Tool Sysinternals PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware IsPE32 - (no description) Is_DotNET_EXE - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	504e9ddf1073e792_tmp59A4.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp59A4.tmp
Size	1.6KB
Processes	2760 (wpx.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`7980f22efc020db60d000b19fa763123`
SHA1	`394339672bfce0bc219a54755ba084ce5dbbb3a9`
SHA256	`504e9ddf1073e792d24f1df0df232664103d1528b363e17a9bfe8921881d8306`
CRC32	`5BFA0EE1`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBQFtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3Cv`
Yara	None matched
VirusTotal	Search for analysis