Dropped Files | ZeroBOX

Name	340c8464c2007ce3_cred64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\cred64.dll
Size	162.0B
Processes	2068 (lamod.exe)
Type	HTML document, ASCII text, with CRLF line terminators
MD5	`1b7c22a214949975556626d7217e9a39`
SHA1	`d01c97e2944166ed23e47e4a62ff471ab8fa031f`
SHA256	`340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87`
CRC32	`CC58D737`
ssdeep	`3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu`
Yara	None matched
VirusTotal	Search for analysis

Name	5267e24f399d705d_lamod.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\a9e2a16078\lamod.exe
Size	205.6KB
Processes	2964 (m1975043.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`04d55362eadaa21ad613f3f833fb4c32`
SHA1	`3a9b667c4c59dd8128d9d926446eb8d9d6383795`
SHA256	`5267e24f399d705dfba51bf71233832d370d884e612bf56178c799a5425b59ac`
CRC32	`CCAD2E54`
ssdeep	`3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	dbcdc009781edffc_clip64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\clip64.dll
Size	89.0KB
Processes	2068 (lamod.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a5ed103ec4719a27ab3d3c01dac66f01`
SHA1	`c830d6980d7edea60568a518eccd36c0bc2a4924`
SHA256	`dbcdc009781edffc3c4e5234d3d23d26364d6bff47e2e384cffdef148d7b5b36`
CRC32	`F6CBC3B2`
ssdeep	`1536:Qo4NPCKLbqoYkbpplW9YoUsxXzbcouNhj2ZszsWuKcdJUQHaB89p:QoUCWbBNpplToUs1uNhj25LJUSaB89p`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsPE32 - (no description)
VirusTotal	Search for analysis