Dropped Files | ZeroBOX
Name 16b4693af0ef7b04_mewiplcrzw.exe
Submit file
Filepath C:\Users\test22\AppData\Roaming\FWDCznNyRu\MeWIPLCRzw.exe
Size 128.0MB
Processes 2052 (CLEP.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 424b8ea4afac71ec43c96aa310253175
SHA1 0dfd1fad4299d7e9b8320d884f40e746c501e110
SHA256 ef09036bffb1ac0bd854a6f292733dd58fd327f1a4d8f74dfb92bd0bf89fc481
CRC32 F222C849
ssdeep 3145728:sicEr2ILbQVrLE7gRO81VWBRfdYd1Q5YFOrBG8w+3s:sicEvb8PwrBRfdY05Rs8w+c
Yara
  • IsPE32 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • NPKI_Zero - File included NPKI
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis