Dropped Files | ZeroBOX

Name	a9220271c0eb79e5_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2336 (powershell.exe)
Type	data
MD5	`b0c9ff441742f3847ea27da9dee7f2cd`
SHA1	`c42a1eb32ba953a0ce5d8635caabf71b5b281495`
SHA256	`a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4`
CRC32	`0BBCAB1A`
ssdeep	`96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	366b32c15ff2b30d_network02.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\network02.exe
Size	5.2MB
Processes	2336 (powershell.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`3edcde37dcecb1b5a70b727ea36521de`
SHA1	`0f2df3cae00d30300e6958bb9e9cda2758f9b1c9`
SHA256	`366b32c15ff2b30da5cafc1407e6dc49aa4bbecffc34c438302022acd1c00b8e`
CRC32	`E9F79033`
ssdeep	`98304:/RLRLj41OH4wAIOF+kmcIxJr+fx3k/sc37gz+li0pjY3l50XYarT:nj417x3Msc8Kli0JUuXYa3`
Yara	Malicious_Packer_Zero - Malicious Packer IsPE64 - (no description) PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file
VirusTotal	Search for analysis