Dropped Files | ZeroBOX

Name	2c2a43b639905aec_rqqktpeew.mg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\rqqktpeew.mg
Size	205.3KB
Processes	2564 (lzoCW4lLiTNeo.exe)
Type	data
MD5	`f5539d3b32e733b9253193cd156676e9`
SHA1	`f20abc1bdf5ab0639240ae9738e829da7e3b60ef`
SHA256	`2c2a43b639905aec768d6ddf0a97a717f2beb6316d565d3dbe9d2c6dfda7b06b`
CRC32	`B8C2DE67`
ssdeep	`6144:AUr2/vAvPy3amjgJrno/EvcJ8waBIrAGBfcg0LfOt:V2/vA3JrnTcJjaBIQZGt`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nssF126.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nssF126.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	4c20e7757079d8f6_btsbjnjm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nssF176.tmp\btsbjnjm.dll
Size	51.5KB
Processes	2564 (lzoCW4lLiTNeo.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3d8fee66fbcbad452746ed860b2d6aba`
SHA1	`98056c72e9a6645dfa913c4494ad63500b722883`
SHA256	`4c20e7757079d8f66bf29593053feea68c411b940677c33d7abc887094a148df`
CRC32	`728EA83F`
ssdeep	`1536:KeJi3kNoZrvE/ptOGMnmD7uTtBEK7dgC:ZSZrgOzmD7W/Tf`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis