Dropped Files | ZeroBOX

Name	340c8464c2007ce3_cred64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\cred64.dll
Size	162.0B
Processes	3008 (rugen.exe)
Type	HTML document, ASCII text, with CRLF line terminators
MD5	`1b7c22a214949975556626d7217e9a39`
SHA1	`d01c97e2944166ed23e47e4a62ff471ab8fa031f`
SHA256	`340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87`
CRC32	`CC58D737`
ssdeep	`3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu`
Yara	None matched
VirusTotal	Search for analysis

Name	af2ca07ba9fa7e51_rugen.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\200f691d32\rugen.exe
Size	205.2KB
Processes	2896 (h3276883.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`069d8a65c153cb72029dbce47700e255`
SHA1	`7d66a6a550d8e463ad7f246c1e06f84937bb7bed`
SHA256	`af2ca07ba9fa7e51f42b0b67b0c84abd69aaac0fecb7d5aa9bfec18584779643`
CRC32	`9CF6C591`
ssdeep	`3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	08dabdd0b0fb13d5_clip64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\006700e5a2ab05\clip64.dll
Size	89.0KB
Processes	3008 (rugen.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`83fc14fb36516facb19e0e96286f7f48`
SHA1	`40082ca06de4c377585cd164fb521bacadb673da`
SHA256	`08dabdd0b0fb13d5d748daf1173f392aa27eb9943eef78bd29e6a8fa61007a6e`
CRC32	`7E54004B`
ssdeep	`1536:Uo4NPCKLbqoYkbpplW9YoUsxXzbcouNhj2ZszsWuKcdJUGNaB89p:UoUCWbBNpplToUs1uNhj25LJU6aB89p`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsPE32 - (no description)
VirusTotal	Search for analysis