Dropped Files | ZeroBOX
Name 4458a9df5275bedd_newplayer.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\newplayer.exe
Size 198.0KB
Processes 1884 (ummaa.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 f0033521f40c06dec473854c7d98fa8b
SHA1 28dadfe642a0c308e1f744b0d87a6d22dd6cd55a
SHA256 4458a9df5275bedd921127f4ff9dc63d4ac107f2e89cf46969e96f4c43d9f93e
CRC32 FC78977C
ssdeep 3072:7+3Z999+G2SeLaTkactpzQx6jvYESNtGkau5gf7oX7Uy+wXnfnPjt:7+H9wieuk1BQMjqNUtu5gToBv
Yara
  • Malicious_Library_Zero - Malicious_Library
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 32f2561030c5fc44_4t.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000304001\4t.exe
Size 566.5KB
Processes 2308 (oneetx.exe)
Type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5 cd2d66edbe500051c5d2711026a84f9d
SHA1 228297d4933ea3be5ec0c88dfe5031b5685518ce
SHA256 32f2561030c5fc44aa2efafeec6a0fdc70409ebd1cb5124e02466dc270f3194d
CRC32 3BFDF62B
ssdeep 12288:LBykmbr3S7BPpdBNvKraxaxKviknyJj/qSBTUCTEM82XFX4Hm7PHK:LBy7gPpPZ4axaxyRnyJLqET8IXcg/K
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
VirusTotal Search for analysis
Name 5c24b1b0c015efd5_c149ec7a.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\c149ec7a.exe
Size 385.5KB
Processes 1884 (ummaa.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 7f104ac1583ec5500a60bc19a12b34cd
SHA1 72527752c44d39998e61d0c8e424fa67b70399d2
SHA256 5c24b1b0c015efd5c3136a7cea787d6ab99147429e1a57e7586dbaba63203b3c
CRC32 BB075F03
ssdeep 3072:Kg5gaIGdhRRSgwuKfRZnk3yZtOhYi8aJfJng7ODlfy9PF+krWaKNKLPcOJdxH/Ws:wedDRSGKvk3yHOmi8anfc4PgLUebH/L
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 0ed14c1e8965c130_alldata.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000303001\alldata.exe
Size 4.3MB
Processes 2308 (oneetx.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 1d80dd9f0e5db1a685c6bb9e9a91b222
SHA1 cbaf6eb478cfaac67372a130f527c63ae4dc496e
SHA256 0ed14c1e8965c13065a00f7d3159a4c711faa24643b4c4815e88299cba495ba0
CRC32 02CF2E75
ssdeep 98304:dxb902OlvMVLD1fTBjOy7TiWlrDfASFqZL4A3KmFn/K0p/7v2/gLB:dxq2OlUV9fUkT1BYEqNpPZ
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 02afba9405a5b480_softtool.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000302001\softtool.exe
Size 385.5KB
Processes 2308 (oneetx.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 94a6c3b42400c62f37c3e09781478ee1
SHA1 d56d09178e01a29fe063a0b3a77e94c7de24a6ef
SHA256 02afba9405a5b480a7b1b80ec9abab41e462f8c30567f1926105a63eaf13e059
CRC32 3006F8D8
ssdeep 3072:2Pwu1IGdhH2Snwk9zkp+weq7EngB9g7Hznro5OvkrWalKNKLPcOJdxH/W5f:AfdZ2ST9zbweq7zBCzzrPvgLUebH/
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis