Dropped Files | ZeroBOX

Name	c5a45793d7c361f1_dtsmsys.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dtsmsys.exe
Size	3.4MB
Processes	2052 (Build1.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`e695b8888af3b57f1a56961bd289463c`
SHA1	`e8c3892fcf4635a16fe91b9542953e2ac5141df2`
SHA256	`c5a45793d7c361f18d36c190b86c951bf0e7a01ad52132c7e9e9d4101eff73aa`
CRC32	`9811A6CF`
ssdeep	`98304:8QBNUcwti78OqJ7TPBSHgMWJ0bJpqcV/:TzUcwti7TQlSBWJq1x`
Yara	UPX_Zero - UPX packed file Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet OS_Processor_Check_Zero - OS Processor Check Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult PWS_CnC_binary_Zero - Communications PWS network Is_DotNET_EXE - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis