popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 7d37a940357e421d_Jim
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Jim
Size 1.1MB
Processes 2560 (kXFpZBb.exe)
Type ASCII text, with very long lines, with CRLF line terminators
MD5 3da96fe8e6d20e60e6aa0a0d3e238f06
SHA1 1baf15fa985c0f9dd0a4073b63038df76e200ed7
SHA256 7d37a940357e421d469f73ef6ed542a0e39158f3b8c0a2fdb1d554a2c41da550
CRC32 16363B2E
ssdeep 24576:QoFqHQVQTc7N2/ypVqHQVQIqHQVQr8qHQVQvqHQVQp1qHQVQEqHQVQNBBBcrHm4g:Qdiu
Yara
  • hide_executable_file - Hide executable file
VirusTotal Search for analysis
Name 3d31e45bcdc1279a_Functional
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Functional
Size 14.2KB
Processes 2560 (kXFpZBb.exe)
Type ASCII text, with very long lines, with CRLF line terminators
MD5 9dbe878aabb7450993537d43fd02e049
SHA1 8e4022632b49a0d1b4b7c118c06d1abf27574c4e
SHA256 3d31e45bcdc1279aadf471cc59456fe057a805c86dca2a03d7dfccc3579165be
CRC32 4E2214E9
ssdeep 384:+y9pl8hw34jCC9Ah5cu//5D2CRAj5cu/RBD2CRASbPlbkBBmnPPaldtEWEK91:+yBaw34jX9I5cuX5ieC5cupBievbPlbU
Yara None matched
VirusTotal Search for analysis
Name be5f228ba17c5292_Leaders
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Leaders
Size 128.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 b5c4fe862ce980185157232caa1f8d07
SHA1 c4ef6dc0437ed70516d426f36e7d722e4a966c2d
SHA256 be5f228ba17c5292b70f88136b0a6f2bf45e979c76d67bde9f41535b07a22fde
CRC32 9F8D65BF
ssdeep 3072:GZZyvs6Df9xris9kMmZiQrds/gNGhFcU+IbXCyZJXXxmJ2sL+gYUUOp4:+yvs6RBis9kMINGhF0yVmJZYUUOp4
Yara None matched
VirusTotal Search for analysis
Name 4f98b23d4d841cf0_Contest
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Contest
Size 110.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 3e201b015671adc19a89c395821aeab0
SHA1 83e6f8b4648e614be7ce8123c3af58cffc105e52
SHA256 4f98b23d4d841cf0912d7a624be0c4be504d2db86335843872474734b227cbc7
CRC32 76679480
ssdeep 3072:y7z835PzpOXeFIqvhGGsC4c83/nOJUDylSgpRuDJ:y7w3hpOXeio1L8/8L8gnuDJ
Yara None matched
VirusTotal Search for analysis
Name f9ffe1a40232b4f4_Rocket
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Rocket
Size 124.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 7354fab1ffb49569c34f41caec19c853
SHA1 2441b50c85e98e3994ee9e7c1d173b717a1031e5
SHA256 f9ffe1a40232b4f4d9ed557dbdedf3074504c6da94e998a4e6a3c4057e2ce4b5
CRC32 2C272F11
ssdeep 3072:Z/VDKC7YORv+j6+3xtAmHQ8PXZM3Pjqdv+Z/2UDjV:Z/VDyO1+j6+hyoM3PGdv+Z/fD5
Yara None matched
VirusTotal Search for analysis
Name af31b0eb59bb8b92_Mug
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Mug
Size 36.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 d5f3ddc265a064fdaa04d6d6592457b4
SHA1 b85f6a73168619d9d29b08f72168b0afc400d0b8
SHA256 af31b0eb59bb8b9226bdddc736720a11707c53ce85a7794fbe208db1fa00f834
CRC32 AD33090A
ssdeep 768:3N8wTVMwBatQaFqfAmU1wiySZsQC1uWuwZkSGzHa3LN:3ZTVBatQaw10wNF7ZkSGz65
Yara None matched
VirusTotal Search for analysis
Name 53b88c6ae9338e8f_Selling
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Selling
Size 1.0KB
Processes 2560 (kXFpZBb.exe)
Type Non-ISO extended-ASCII text, with very long lines, with NEL line terminators
MD5 4519afc730c2d23d9e3dc0bbf93e2e13
SHA1 3c422d5b9f8aa6a7d858ade94624f7c39e347813
SHA256 53b88c6ae9338e8f5ad0b156b7ac4c62adf6d09b91b3ec9ac4b338cc54cb09a6
CRC32 F34A59B9
ssdeep 6:wJiKLQqiJiJiJiJiJiJimRiJiJiJiJiJvJiJiJiJiJiX23iJiJiJiJiJiJiL4as8:wjQq/KA4P1FMW8OiM0lVEOP9a28Fm
Yara None matched
VirusTotal Search for analysis
Name cb80076e2b701295_Bosnia
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Bosnia
Size 113.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 3f8f3d70d0747e502be5fb7af2eaf17b
SHA1 2bd67ce70388dd48ec4493f8accc22dd27474231
SHA256 cb80076e2b7012954e823cabaf052cdb32e38679273c12d950b95fec1b43c058
CRC32 967E8447
ssdeep 1536:KIaj6iTcDPsMLxjgarB/YaC3EYrDWyu0uZn:W6lLxjgarB/YaCDWy4Zn
Yara
  • Malicious_Library_Zero - Malicious_Library
VirusTotal Search for analysis
Name 1e71f3809f31294c_Pp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Pp
Size 52.1KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 9e1d9663d679c8b23c6c6b9612b74532
SHA1 5ce5b513d84fbdb77a086f3bfd0ef7ffbc34f4a6
SHA256 1e71f3809f31294c8e36d459e45869d8ccd50eaee0f34d3538e1c71eb5e55d8e
CRC32 A4DE7BEE
ssdeep 768:Hr2+9BQINqAcGo7ItSRE1myvGwBS86IvF23kou9NpODXH6Z4LVatiV1VaXLkjy:L2+9BQINSqN1vGSDvc3koulBZY/P0z
Yara None matched
VirusTotal Search for analysis
Name 07a878628915376a_Propose
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Propose
Size 113.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 9b3e6bc018077431287aa79af03891fb
SHA1 1fb84cf48be82fd4bba32013060496dee24ee5e1
SHA256 07a878628915376a405de3a6250457edf49d4661d8aef44c07a0c3fe64fd67b4
CRC32 A60A7153
ssdeep 3072:Dzy9pl/VxpYjay5SzsP1zCJnIgOyK108GL3TFJ7G:ny9p1pX8Sz4yK1yrG
Yara None matched
VirusTotal Search for analysis
Name b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2820 (powershell.exe)
Type data
MD5 81ca4510272caf505e8091e9a28cb716
SHA1 71414aeec9f1e4a6f5a461b01700cc9cc992cd9e
SHA256 b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf
CRC32 FC31E90F
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY
Yara
  • Generic_Malware_Zero - Generic Malware
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name c2bb9f6edcd6f473_Spirituality
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Spirituality
Size 146.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 3df5172de79230be490889329c2b7a93
SHA1 4213d1642f883c7b4c360716256da0c6c954d617
SHA256 c2bb9f6edcd6f473fe43a4f8d0c6afc1b203737b392498717addbc47ec31ae38
CRC32 F670DB79
ssdeep 1536:j+QIoSK5+OGuVGHj1vtK7ibD8anHsWccd0vtmgMbFuz08QuklMBNIi9uLaAwuaP2:jU/Kkr38QLeAg0Fuz08XvBNbSaAtaP2
Yara None matched
VirusTotal Search for analysis
Name 011427b805a86016_Chapters
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Chapters
Size 87.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 41d9bfe80585e97442eecf97d08654bf
SHA1 dac590499397374b896487e0c5c2b35fe2e59ce3
SHA256 011427b805a86016330fb420da3603c822c976c28274326a2c3255889d12260e
CRC32 60812358
ssdeep 1536:xrb5yYpTXuiiuOQ/cnFdnIj5Pd4PIagKaTwSx+aPh/e73H5AtgDml3TBZVu/:TXmuN/ebIj5Z6bH4GLHatgOTB6
Yara None matched
VirusTotal Search for analysis
Name fb8589e83fee9e3a_Called
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\Called
Size 15.0KB
Processes 2560 (kXFpZBb.exe)
Type data
MD5 45d3da1eeb0c8d0c87ff619463a1779b
SHA1 df7496857d17cdc9e56ca8c43327e7c099aa35d1
SHA256 fb8589e83fee9e3a14293453b8874c67df1323c9bace4a67c19eee4f694c07de
CRC32 16A8553C
ssdeep 384:xb8ksU6OmEZxAOdfzI9MyKRUmYk7K9uvpjhKsrpKR:QAjk9MRFYb94pdKsrpC
Yara None matched
VirusTotal Search for analysis