Dropped Files | ZeroBOX

Name	9f2a1b5f1a3d3fb9_microsofttopclayemat.ps1 Submit file
Filepath	C:\Users\Public\Microsofttopclayemat.ps1
Size	118.0B
Processes	2544 (wscript.exe)
Type	ASCII text, with CRLF line terminators
MD5	`acd317c9fdc730f2a0215f8635276a26`
SHA1	`a8f9a9406cd448886abe4dbf8bb8016e64b1bc9c`
SHA256	`9f2a1b5f1a3d3fb962d221a437e01fe09e3409e1ba8bc082aaaac96c91846ceb`
CRC32	`1524ED14`
ssdeep	`3:D/LIetwrWXLhzAK5DudNkPydMiMTUYwJPNyn:r1zD5mNkPydDk8M`
Yara	None matched
VirusTotal	Search for analysis

Name	42ff758f36112830_clayemat.vbs Submit file
Filepath	C:\Users\Public\clayemat.VBS
Size	171.0B
Processes	2544 (wscript.exe)
Type	ASCII text, with CRLF line terminators
MD5	`f36403827bab561c464f8c46052fbdea`
SHA1	`6d74fe8ca5e23d0aad9ed6ea50ae517c536beb00`
SHA256	`42ff758f36112830add19f452f9582f15fc20a4f5e9e97e6da7ac56257cc974b`
CRC32	`D1D8CE6D`
ssdeep	`3:NUcsSJJLNyL5LIpqPJH02MI8j1aHF5oMGaR3KV42THoLWNYYFFEm8nhQSzv:tnyL5L0O0zIa1aH1G+4THp3Nqhrv`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2932 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Generic_Malware_Zero - Generic Malware Antivirus - Contains references to security software
VirusTotal	Search for analysis