Dropped Files | ZeroBOX

Name	df9eb7c66aa55305_jly79.zip Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\jly79.zip
Size	1.2MB
Processes	2344 (powershell.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`325c6657e21b794a5802334e30233255`
SHA1	`77ab87cbcba7ca2f5dbd71841f2914a51f8c6f27`
SHA256	`df9eb7c66aa55305c29afbb16c3b63afbfedd9f3991936cf62a0954e0f03055c`
CRC32	`BF7BA6B3`
ssdeep	`12288:V54Q48zoL5sB1IoVJDegIscKHS5BLOuVVJEtPRHZAsvTWIW+8VZhYC63/Iy:EQBoL5sB1FVJD5CggyuTKzH0/iIy`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2344 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis