Dropped Files | ZeroBOX

Name	d6431d5645fffd05_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2228 (powershell.exe)
Type	data
MD5	`260d23ce04a8f8555a73b7d2dc15e911`
SHA1	`ebad746fb7de847c50f7502a44f6e35534733efd`
SHA256	`d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588`
CRC32	`11D6B213`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	17e3324c9dc18db2_btxqjssa.vbs Submit file
Filepath	C:\Users\Public\BTXQJSSA.vbs
Size	412.0B
Processes	2228 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`ffd7a53b92446230fe6b29e9b452549f`
SHA1	`23d63487504123170fe76f11b6ef7eb8e88905bc`
SHA256	`17e3324c9dc18db21a5c89f10ec5846df8fe8f5e043dc6d36bc7fc8ff2f13687`
CRC32	`23D60332`
ssdeep	`6:VtGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGT+tGTBRPaH77wCjlZWAqxc0sT:VtRtRtRtRtRtRtRtRtRtRtr1Hzp1KZVE`
Yara	None matched
VirusTotal	Search for analysis

Name	6a8a207e80bd0b57_btxqjssa.bat Submit file
Filepath	C:\Users\Public\BTXQJSSA.bat
Size	207.0B
Processes	2228 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`29f30c2fcc80dafe07a07ba89094bbf1`
SHA1	`590daf158c0dc4cb3a2505282e3abca69168e293`
SHA256	`6a8a207e80bd0b5771d0062b6a3f809a236767848cfda61ceb5c2b896aa6d528`
CRC32	`0F915CA3`
ssdeep	`6:9iOUjR9bGnIvWWqII1R3KbQO0cvfp1aH77wC8rmQ24Nivy:Y7SnIOWXI1kbQpcvfK0mQ/ia`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RFefce51.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RFefce51.TMP
Size	7.8KB
Type	data
MD5	`b0c9ff441742f3847ea27da9dee7f2cd`
SHA1	`c42a1eb32ba953a0ce5d8635caabf71b5b281495`
SHA256	`a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4`
CRC32	`0BBCAB1A`
ssdeep	`96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis