Dropped Files | ZeroBOX

Name	eb405e175ae16fd8_pydllsvv.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\pydllsvv.exe
Size	3.3MB
Processes	884 (testing.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`1c2b15ed1c8897bb466ec6f1a0f3e815`
SHA1	`b2faf832c9a2e0d7210374560cfff65406659884`
SHA256	`eb405e175ae16fd8877aa87ffdb39f0d4f41cf7c77351708d84f44dd790c35d2`
CRC32	`1314AC6C`
ssdeep	`98304:4QBNUcwti78OqJ7TPBsHgMWJ0bJpqcV/:/zUcwti7TQlsBWJq1x`
Yara	UPX_Zero - UPX packed file Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet OS_Processor_Check_Zero - OS Processor Check Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult PWS_CnC_binary_Zero - Communications PWS network Is_DotNET_EXE - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis