Dropped Files | ZeroBOX

Name	17e3324c9dc18db2_btxqjssa.vbs Submit file
Filepath	C:\Users\Public\BTXQJSSA.vbs
Size	412.0B
Processes	2264 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`ffd7a53b92446230fe6b29e9b452549f`
SHA1	`23d63487504123170fe76f11b6ef7eb8e88905bc`
SHA256	`17e3324c9dc18db21a5c89f10ec5846df8fe8f5e043dc6d36bc7fc8ff2f13687`
CRC32	`23D60332`
ssdeep	`6:VtGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGTBRPaH77wCjlZWAqxc0sT:VtRtRtRtRtRtRtRtRtRtRtr1Hzp1KZVE`
Yara	None matched
VirusTotal	Search for analysis

Name	6a8a207e80bd0b57_btxqjssa.bat Submit file
Filepath	C:\Users\Public\BTXQJSSA.bat
Size	207.0B
Processes	2264 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`29f30c2fcc80dafe07a07ba89094bbf1`
SHA1	`590daf158c0dc4cb3a2505282e3abca69168e293`
SHA256	`6a8a207e80bd0b5771d0062b6a3f809a236767848cfda61ceb5c2b896aa6d528`
CRC32	`0F915CA3`
ssdeep	`6:9iOUjR9bGnIvWWqII1R3KbQO0cvfp1aH77wC8rmQ24Nivy:Y7SnIOWXI1kbQpcvfK0mQ/ia`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2264 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis