Dropped Files | ZeroBOX

Name	824fae3331b95e2f_zbJqrdd.tmp Submit file
Filepath	C:\Users\test22\AppData\Roaming\zbJqrdd.tmp
Size	40.0KB
Type	SQLite 3.x database, last written using SQLite version 3033000
MD5	`41c19a9e8541fcb934c13c075bf47721`
SHA1	`648a7622d533d79b9a0bb31dc370134ec3a75ed7`
SHA256	`824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c`
CRC32	`560F7642`
ssdeep	`48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u`
Yara	None matched
VirusTotal	Search for analysis

Name	a9220271c0eb79e5_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2688 (powershell.exe)
Type	data
MD5	`b0c9ff441742f3847ea27da9dee7f2cd`
SHA1	`c42a1eb32ba953a0ce5d8635caabf71b5b281495`
SHA256	`a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4`
CRC32	`0BBCAB1A`
ssdeep	`96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	d7e180c7dc58f401_tmp20D1.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp20D1.tmp
Size	1.5KB
Processes	2344 (.winlogon.exe)
Type	XML 1.0 document, ASCII text
MD5	`286a555dd23c91670bc96822d8dde896`
SHA1	`64269cc179180f89f9e07b2f074cc0fc468470b5`
SHA256	`d7e180c7dc58f4018c7e22e50223ee5b6ff12dd10c90cab6051ae39639b1c477`
CRC32	`18C1D806`
ssdeep	`24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNtkxvn:cgefAYrFdOFzOzN33ODOiDdKrsuT0v`
Yara	None matched
VirusTotal	Search for analysis

Name	faa711f56a647a33_FdudrtG.tmp Submit file
Filepath	C:\Users\test22\AppData\Roaming\FdudrtG.tmp
Size	177.5KB
Type	UTF-8 Unicode text, with very long lines, with no line terminators
MD5	`4104a0860a7f2d089998e15a35e2af42`
SHA1	`e8832b39adb456828333dc03a9763d316bc6d1e9`
SHA256	`faa711f56a647a33d32a0d54d80123eca42dfa1186c2bb15b8c1a5d5479e1270`
CRC32	`4D5FFC88`
ssdeep	`3072:OJIcSTedOb0wUJQ1PwDztZzweDWniCZPYPC+MGQ8iTVEG+D8VbnRFQ:OmT0PJNPzzWniC+q8Pi2G+D8VbnRq`
Yara	NPKI_Zero - File included NPKI
VirusTotal	Search for analysis