Dropped Files | ZeroBOX

Name	4aa5b396e17ae25b_tmpBC12.tmp.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpBC12.tmp.bat
Size	156.0B
Processes	2084 (None) 2792 (cmd.exe)
Type	DOS batch file, ASCII text, with CRLF line terminators
MD5	`517bb2f26c35309338ff08cb601ea1eb`
SHA1	`02a3e20d86691a6c0be3a0adaf476e6fdcdf0cbf`
SHA256	`4aa5b396e17ae25bdd49612118fd9a030e2392deb2854e1035fc81da9a0de10b`
CRC32	`89F9CA5B`
ssdeep	`3:mKDDCMNqTtvL5omWxpcL4EaKC5bUSmqRDmWxpcL4E2J5xAInTRINS5ZPy:hWKqTtT6mQpcLJaZ5bfmq1mQpcLJ23fG`
Yara	None matched
VirusTotal	Search for analysis

Name	ea04850fa21b0c32_updatehost.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\UpdateHost.exe
Size	45.0KB
Processes	2084 (None)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`65c06c0404ce69f08491b0f868e0b635`
SHA1	`1755e9e23b212c625fd2abe28ddd8255417bdc59`
SHA256	`ea04850fa21b0c32d74e4f6dfd09540efb4674cb64e6836b4842d8a7e6ae587a`
CRC32	`3653428B`
ssdeep	`768:jujYm1TUET1/WUTQV9mo2qz+8V1vBTcPI1zjbkgX3iKKeS6XGdmLhufvfBDZ/x:jujYm1TU0I2P8VnTh13brXSR+iyGvpdp`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult AsyncRat - AsyncRat Payload Is_DotNET_EXE - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description)
VirusTotal	Search for analysis