Dropped Files | ZeroBOX

Name	0d07ecf10e0261f0_lamod.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\a9e2a16078\lamod.exe
Size	205.4KB
Processes	2600 (m2508063.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`fd4c320de1702d4688a54669586eee35`
SHA1	`c222e49613c41173b3dcff1b6eb9ba526d10c154`
SHA256	`0d07ecf10e0261f02fd8d7fa98e213eb286adda3910f0917ae0b590c4339bdee`
CRC32	`472721F4`
ssdeep	`3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	340c8464c2007ce3_cred64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\cred64.dll
Size	162.0B
Processes	2764 (lamod.exe)
Type	HTML document, ASCII text, with CRLF line terminators
MD5	`1b7c22a214949975556626d7217e9a39`
SHA1	`d01c97e2944166ed23e47e4a62ff471ab8fa031f`
SHA256	`340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87`
CRC32	`CC58D737`
ssdeep	`3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu`
Yara	None matched
VirusTotal	Search for analysis

Name	dbcdc009781edffc_clip64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\clip64.dll
Size	89.0KB
Processes	2764 (lamod.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a5ed103ec4719a27ab3d3c01dac66f01`
SHA1	`c830d6980d7edea60568a518eccd36c0bc2a4924`
SHA256	`dbcdc009781edffc3c4e5234d3d23d26364d6bff47e2e384cffdef148d7b5b36`
CRC32	`F6CBC3B2`
ssdeep	`1536:Qo4NPCKLbqoYkbpplW9YoUsxXzbcouNhj2ZszsWuKcdJUQHaB89p:QoUCWbBNpplToUs1uNhj25LJUSaB89p`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsPE32 - (no description)
VirusTotal	Search for analysis