Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	11012f5ff6a8dbcc_apeuke.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsjC011.tmp\apeuke.dll
Size	86.0KB
Processes	1900 (unsecapp.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`c605632cb4e5e3cd444a9d544af178bb`
SHA1	`7e68e56b767bcffa368d7e40dde9125f82b5f67e`
SHA256	`11012f5ff6a8dbcc85263998ace026c99a35b209d06c5ef4b5c7bc5826718045`
CRC32	`69A95213`
ssdeep	`1536:6VbqU+ws0sjQf0xF7+YsuPDoFbEe99hZFtDX8:E+SVf037+CDsES9hdX`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis

Name	320f6ae06722d803_ssmlfovg.l Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\ssmlfovg.l
Size	7.6KB
Processes	1900 (unsecapp.exe)
Type	data
MD5	`145cf41b99e89bdb5033bc017a4a2b51`
SHA1	`3b633e52944b823f0c43478201cc00458751ae0d`
SHA256	`320f6ae06722d803aa0f4c3bdf4b30f88d66fa8ab620ad883e227a76832dee12`
CRC32	`58DC0BAD`
ssdeep	`192:LWTtJD/vGJbz1z8T5abho60/pojjCO6jSkgmGsbiKpQ+xFEHMjp4:KTtJLQb5z8T5abu6GajjCOiSkY6pQuFM`
Yara	None matched
VirusTotal	Search for analysis

Name	1b53211be371eed9_wjbdcsdmylm.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\wjbdcsdmylm.ui
Size	206.3KB
Processes	1900 (unsecapp.exe)
Type	data
MD5	`5203d41a3c9d68f844187c5c3276cc1d`
SHA1	`e421d34220da014cfb691fc0f95eb556b2a9f446`
SHA256	`1b53211be371eed917ca88c57f91ffc235affd42d7da3b290ee0160525cd7073`
CRC32	`86545E98`
ssdeep	`3072:9HYu9pk4U3tDIXGWd2EXtvuT9SqSzQOZVxS8l7SbTtRM0nEDz8MW7BVoNaWbck+w:VY4pkNDMk05l7oTt+0nEUMWFVoIWbftX`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsdBFEF.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsdBFEF.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	ab0646fd7bf8dece_foktdy.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\yenjsoxhcluqav\foktdy.exe
Size	285.4KB
Processes	1900 (unsecapp.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5	`297c423d2a4a52a7f109240ae70b4ca1`
SHA1	`1b67e2878e558354287c4520d57d7e441a43a491`
SHA256	`ab0646fd7bf8dece42e0c38e843fbe4cbb9c18e0e98cb26cad14357fde20ed4a`
CRC32	`7DC7C699`
ssdeep	`6144:PYa6ZqAP7zUPusAHp0X94+O/kcw0u4vEEMLwdToNvrj5jcB4H6:PYLq0zcAHpa945fw4M81ugBB`
Yara	UPX_Zero - UPX packed file NSIS_Installer - Null Soft Installer PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis