Dropped Files | ZeroBOX

Name	f5382a7d59b06743_fuzhazqmi.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\QwwMNoAWc\fuZHaZqmi.exe
Size	158.5KB
Processes	800 (UpdateGroup.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`97acdf48c972303f1c68bffb21f7531d`
SHA1	`c04c81bb82af43b73dc5dbc3412a1cbf2845d8df`
SHA256	`f5382a7d59b067434399775d3bc22588c5e54e4642257e3f01692f4eb5a228a8`
CRC32	`E4AE888F`
ssdeep	`3072:TbzRL+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPnYO8Y:TbzRC0ODhTEPgnjuIJzo+PPcfPnv8`
Yara	UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT IsPE32 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software
VirusTotal	Search for analysis