Dropped Files | ZeroBOX

Name	4021df68f91881e7_error[1] Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\error[1]
Size	3.2KB
Processes	3000 (mshta.exe)
Type	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`7d46fb61e9b1b0d57df00e1b3d392e33`
SHA1	`5b14562e288d76851164bd8a65d13d987d6da375`
SHA256	`4021df68f91881e7e4bf54d6795f9186ccab9a3813f5c4358c1b5a81560da891`
CRC32	`BAD674A7`
ssdeep	`96:CwhabJ/1xjqDbT2pftwEjlddFBdd5w3dddDzMddv+dd8WfFhllhX4PyAvdh:TcC2pTnsPkIDll4KIh`
Yara	None matched
VirusTotal	Search for analysis

Name	b0abe318200dcde4_error[1] Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BYECVYBT\error[1]
Size	1.7KB
Processes	3000 (mshta.exe)
Type	UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`b9bec45642ff7a2588dc6cb4131ea833`
SHA1	`4d150a53276c9b72457ae35320187a3c45f2f021`
SHA256	`b0abe318200dcde42e2125df1f0239ae1efa648c742dbf9a5b0d3397b903c21d`
CRC32	`3FC3F274`
ssdeep	`48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO`
Yara	None matched
VirusTotal	Search for analysis

Name	5f95eff2bcaaea82_warning[1] Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\warning[1]
Size	1.0KB
Processes	3000 (mshta.exe)
Type	GIF image data, version 89a, 36 x 38
MD5	`124a9e7b6976f7570134b7034ee28d2b`
SHA1	`e889bfc2a2e57491016b05db966fc6297a174f55`
SHA256	`5f95eff2bcaaea82d0ae34a007de3595c0d830ac4810ea4854e6526e261108e9`
CRC32	`EED13E6B`
ssdeep	`12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E`
Yara	None matched
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2208 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis