Dropped Files | ZeroBOX
Name 0d7a82c13c20240d_gxcbqct.ltx
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\gxcbqct.ltx
Size 6.0KB
Processes 2552 (nejorg2.1.exe)
Type data
MD5 406b9010a289bcec7b6cfbc191fb9624
SHA1 6be2a02aa88a249d048426309bddac21e21b832e
SHA256 0d7a82c13c20240d0b2dafd32f80d57fe30ac171e413fe5fedeaca746564eaf9
CRC32 38015714
ssdeep 96:8UfTtXiAlVO0aBBmiL+EY4V7SAmYJcN8Ff3kslAoYZXF7uaz+7WlZEK6TRdQKHSi:tTtXiA36dVpVmsjF/ksOoy17xzaWlZE/
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsaF126.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsaF126.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 1853a2567499e103_blswfwqk.v
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\blswfwqk.v
Size 263.0KB
Processes 2552 (nejorg2.1.exe)
Type data
MD5 55a5ccdb3b72ba72f990f611ab560c28
SHA1 507472194424d92a96e4fb2e3db77a02307c1f0a
SHA256 1853a2567499e10327cdb466f6ba5b6c6b437f559fd0c89eb53793b474cd4e44
CRC32 B888E758
ssdeep 6144:i5F7pWpXi3NWkP+EOwy82yha1q/LfpFRl+JU/hyfQSBBb3h8:o78Y3YysDyhBbp/IfvTu
Yara None matched
VirusTotal Search for analysis
Name 5ed5a57226a1720e_yuepd.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsaF176.tmp\yuepd.dll
Size 80.5KB
Processes 2552 (nejorg2.1.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 83c989a1b84c83495a807c42dd0fd834
SHA1 26e686b2c01452b33a9ba20f4c45e9835e5b7b0c
SHA256 5ed5a57226a1720e0699730761c6ececf2448e9b3be01dfa2ab0adcf5cd7633c
CRC32 F57A0F06
ssdeep 1536:EdZoMx3d8E1WYgfsF0TlYjSynS1qSs2ssWRGcdba200U5W+:EdiMDp1WYf0T91q7nbaqgW+
Yara
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
  • IsDLL - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis