Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	cb3bc1b8b740f2b2_toolspub2.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000005001\toolspub2.exe
Size	205.5KB
Processes	2368 (oneetx.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`46a85f9fb354c4a5c4ea7a321ee9c3b9`
SHA1	`ff3e925a9463283888189692865775205a0976a9`
SHA256	`cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4`
CRC32	`12266A1F`
ssdeep	`3072:TbX4VhWx/0KWc3T7P8bpslF2YthpQdNa2rRdLxHZX4tDaH:Ho7GfrDYOoopNglHV4t`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4458a9df5275bedd_newplayer.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\newplayer.exe
Size	198.0KB
Processes	1932 (obins.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f0033521f40c06dec473854c7d98fa8b`
SHA1	`28dadfe642a0c308e1f744b0d87a6d22dd6cd55a`
SHA256	`4458a9df5275bedd921127f4ff9dc63d4ac107f2e89cf46969e96f4c43d9f93e`
CRC32	`FC78977C`
ssdeep	`3072:7+3Z999+G2SeLaTkactpzQx6jvYESNtGkau5gf7oX7Uy+wXnfnPjt:7+H9wieuk1BQMjqNUtu5gToBv`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8b0bc6d4b6652804_3eef203fb515bda85f514e168abb5973.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000003001\3eef203fb515bda85f514e168abb5973.exe
Size	4.1MB
Processes	2368 (oneetx.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`d82f58a3a66392e427af0c1ed193a436`
SHA1	`9400a04b6723f3c338dc783ee1f042c38b0ef7bb`
SHA256	`8b0bc6d4b66528046bbb615a4749d3f8de40587632fc98e16264d39644f2839f`
CRC32	`34414570`
ssdeep	`98304:pXhDTlaeN7+WIQy2uZFBRMNdD+S1O82s2jA3qPjPLFjEut3uNt+euu2TO+N8:pXXN7DvuZ5M7+v4AjLFgNt+euq`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b56459b00e75cd98_ss41.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\ss41.exe
Size	635.5KB
Processes	1932 (obins.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`730f705fb43707395f4ff1c00e01f576`
SHA1	`7cba596e3912504bc4d87a03fbc0190aab7befe1`
SHA256	`b56459b00e75cd98b37de308113ff5d79584ee0715c82559f5dadd7539f2bc85`
CRC32	`2974FE3E`
ssdeep	`12288:3quFnYzy3VGiBX5fYwarPZpBqxlyfndmLB:3qOn0ziCPzBqzem9`
Yara	Malicious_Library_Zero - Malicious_Library IsPE64 - (no description) Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	0c66455c62f9e8d2_setup.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000004001\setup.exe
Size	276.0KB
Processes	2368 (oneetx.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`94a8cb37cf0aa2d1fedb893167f4dc67`
SHA1	`08b2d1d0ff9c73128faa4180377c7f1a0290252b`
SHA256	`0c66455c62f9e8d2755760f97d5e51e26267682cc9a6ec15bae1f1d0bbeaaa65`
CRC32	`CDD35602`
ssdeep	`6144:mQ2gt7NFrXs89+lmrZoYErwBPDAZ9DMkU1Zxt:ggzFf9ArwBLAjD+Zxt`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	90e12268c6886da7_2a344302.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\2a344302.exe
Size	207.5KB
Processes	1932 (obins.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`31e6d2018b345fe69bbc2cf8f69215b3`
SHA1	`7bd30d865386c349f3c29c9d85fda0a7ad76111d`
SHA256	`90e12268c6886da75cf395936df7635c52dfcd3bcf074396dd9c97fa55c9eb5b`
CRC32	`BB9232EA`
ssdeep	`3072:VYTKEKvZSP65OLdxg8PGmAqjGyhetUsyOhyZaRtIRdo5tDaX:a2BQP65odxVPEzn6Zan8o5t`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis