Dropped Files | ZeroBOX

Name	611db998391b2354_driver.url Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Driver.url
Size	155.0B
Processes	3016 (None)
Type	MS Windows 95 Internet shortcut text (URL=<file:///C:\Users\test22\AppData\Roaming\Sysfiles\MinerFull.exe>), ASCII text, with CRLF line terminators
MD5	`c70372e7052de9b8883997db57a4b92b`
SHA1	`cf6b7a5147a9c7056c0c0b3213020242693b612b`
SHA256	`611db998391b23540e671491853011ab412bfe1fccda20d1811b0a8a8250b40a`
CRC32	`080A45DB`
ssdeep	`3:HRAbABGQYm5uOmWxpcL4EaKC5SQntMIJ4ovst1JkRErLyukiWXU:HRYFVmwOmQpcLJaZ5lyIJlvst8++W`
Yara	None matched
VirusTotal	Search for analysis

Name	8d6abba9b216172c_driver.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Sysfiles\Driver.exe
Size	3.9MB
Processes	3016 (None)
Type	MS-DOS executable, MZ for MS-DOS
MD5	`02569a7a91a71133d4a1023bf32aa6f4`
SHA1	`0f16bcb3f3f085d3d3be912195558e9f9680d574`
SHA256	`8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0`
CRC32	`2D90BDE3`
ssdeep	`49152:SNDFFPJu8fBsVE6ij+RNg+UKpBvtqB3m1RC3Z:wzP88fBsnZTgOtqB3m1RC3Z`
Yara	MPRESS_Zero - MPRESS packed file PE_Header_Zero - PE File Signature IsPE64 - (no description)
VirusTotal	Search for analysis

Name	48f66e13c00038bb_minerfull.exe Submit file
Filepath	C:\ProgramData\MinerFull.exe
Size	4.0MB
Processes	2804 (ddd.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`5c7bc4cc56f6e6acb801210bc6eda798`
SHA1	`541b6f50091fdc17c2bc8d596c0e202b854fb991`
SHA256	`48f66e13c00038bb2ec12a58bd34cb79f2cf616230c25224c68b81d6c3d7ebf9`
CRC32	`5DB375E2`
ssdeep	`49152:bNDFFPJu8fBsVE6ij+RNg+UKpBvtqB3m1RC3:5zP88fBsnZTgOtqB3m1RC3`
Yara	IsPE32 - (no description) Generic_Malware_Zero - Generic Malware MPRESS_Zero - MPRESS packed file OS_Processor_Check_Zero - OS Processor Check UPX_Zero - UPX packed file Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis