Dropped Files | ZeroBOX

Name	88aa17ff396f40e6_pyienjscxh.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\ibwgbkt\pyienjscxh.exe
Size	60.0KB
Processes	2652 (aihaah.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`126173994331f7784faa6b180e5a2132`
SHA1	`c5a080d4f2d1e7cd59e02ce6aa3438cf73f7e011`
SHA256	`88aa17ff396f40e63bb4f11d4a31a9117204692cd027752da0495fdfb58ff665`
CRC32	`DCF670AB`
ssdeep	`768:R9Hdb1fz0jzlhEBIJdQAQ1pIPrfPJXdEYw0uzMTPkmARSdiY2APbhG5/RY:R9Hb8hHJmHIPrfBGcPi25Ps5`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	4b9efdd71edb8620_dqbah.nzr Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dqbah.nzr
Size	263.0KB
Processes	2556 (GIB.exe)
Type	data
MD5	`12582a21e249143b37841f5d1a80c0ec`
SHA1	`33b55b80df8eaed3e04a47509f1ecdb9f3d9a3b1`
SHA256	`4b9efdd71edb8620e47d5b85133dc73b12ce4d4ac35a135b4a2c6ba546686a33`
CRC32	`76723CA4`
ssdeep	`6144:pH7irJIWD+iC6KKUlmfYHbqg1rxCKcRnI:tirJIy+iCj+QWWN5c5I`
Yara	None matched
VirusTotal	Search for analysis

Name	9531c86366939cdb_rqxraj.u Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\rqxraj.u
Size	7.6KB
Processes	2556 (GIB.exe)
Type	data
MD5	`9ddb9349df7cf50af4b523151109f943`
SHA1	`8a823dc4ad81b7711648301e16c780243094b8ad`
SHA256	`9531c86366939cdb986683ed27cf5cb9f5a1ce00cd5402831415cb5b3c9415b4`
CRC32	`467AA230`
ssdeep	`192:darcitQvArWiPvTdRb9n8QpxDGQm9ShEVGt+R8AdeSL:uCYrNPvp12Q04tYd1`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsmEF70.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsmEF70.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis