Dropped Files | ZeroBOX

Name	0ae7c130ac723ca4_tmp90C1.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp90C1.tmp
Size	1.6KB
Processes	3000 (SHIPPING Docs-DRAFT MBL HBL KGNSA2212999 ETD 12 DEC.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`1974c14c5eaee770275c083716d37d90`
SHA1	`d33b5136abdbd3827a4bde50bcfc969b4ddc2673`
SHA256	`0ae7c130ac723ca45fbbdeee69b084261c9a3d7b2fb6104a139241da3c64c56c`
CRC32	`02AA0855`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBXtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3b`
Yara	None matched
VirusTotal	Search for analysis

Name	1c458dbab474aa55_cqguaiuyi.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\cqguaIuYI.exe
Size	908.5KB
Processes	3000 (SHIPPING Docs-DRAFT MBL HBL KGNSA2212999 ETD 12 DEC.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`5e835a1077f20ea48cbceca3ff7160cd`
SHA1	`5ece993b14c1381b0d2457e9cbfae097042a416f`
SHA256	`1c458dbab474aa55c42e465e34a64faae2b567910490621aeda7ffb51b7b29dc`
CRC32	`0DF1776B`
ssdeep	`12288:nVfmmfw/SHlQhbn2iNqzEKiNo6xUqzaST/gVH6eEvA/m:FzfOSHlQhbn14li/zaST/gR4A/m`
Yara	IsPE32 - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult Admin_Tool_IN_Zero - Admin Tool Sysinternals Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis