Dropped Files | ZeroBOX

Name	340c8464c2007ce3_cred64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\cred64.dll
Size	162.0B
Processes	3036 (oneetx.exe)
Type	HTML document, ASCII text, with CRLF line terminators
MD5	`1b7c22a214949975556626d7217e9a39`
SHA1	`d01c97e2944166ed23e47e4a62ff471ab8fa031f`
SHA256	`340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87`
CRC32	`CC58D737`
ssdeep	`3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu`
Yara	None matched
VirusTotal	Search for analysis

Name	5fbf2b4ce1c3254b_oneetx.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\c3912af058\oneetx.exe
Size	209.8KB
Processes	2908 (i5580211.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`aae5b70349e293ea50dbcdbdd6df94b9`
SHA1	`eb4bcf520a678a2be6cf9d2decd9788ce2418da0`
SHA256	`5fbf2b4ce1c3254bc479f528ecb703fe382a8269026eb1f7ddd18f087b79dc2c`
CRC32	`BE3737E6`
ssdeep	`3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library
VirusTotal	Search for analysis

Name	b8c8aedd84c36385_clip64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\clip64.dll
Size	89.0KB
Processes	3036 (oneetx.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8451a2c5daa42b25333b1b2089c5ea39`
SHA1	`700cc99ec8d3113435e657070d2d6bde0a833adc`
SHA256	`b8c8aedd84c363853db934a55087a3b730cf9dc758dea3dc3a98f54217f4c9d0`
CRC32	`05D62A3B`
ssdeep	`1536:Bo4NPCKLbqoYkbpplW9YoUsxXzbcouNhj2ZszsWuKcdJU7faB89p:BoUCWbBNpplToUs1uNhj25LJUDaB89p`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) IsPE32 - (no description) Admin_Tool_IN_Zero - Admin Tool Sysinternals PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library
VirusTotal	Search for analysis