Dropped Files | ZeroBOX
Name b530c41ce3f7df16_~wrd0001.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0001.doc
Size 32.0KB
Processes 2552 (WINWORD.EXE)
Type data
MD5 5c3791c51c89677a2b879fcd4e182b18
SHA1 e83691be7e61a50ffd5329ab388a19402cf3030a
SHA256 b530c41ce3f7df16ba50621dd2b836b600b1600f14e5d89b241d71363c9b6392
CRC32 02267CC3
ssdeep 384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOf9:58BGToSqsxmhBDiUG7Lff9
Yara
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 5659324286126f7c_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 2552 (WINWORD.EXE)
Type data
MD5 dee4dd862d745796edffe0ecc587995c
SHA1 a9dd26d1ab5f86e55cfa68ac99c2580f75af906a
SHA256 5659324286126f7c92187c1267adde248f87d351a423543d3e06f123b4eb7516
CRC32 F5BA3B14
ssdeep 3:yW2lWRdvL7YMlbK7lyn/l/:y1lWnlxK7Qn/
Yara None matched
VirusTotal Search for analysis
Name 5d6ef4d41e9968fb_~wrd0000.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0000.doc
Size 43.0KB
Processes 2552 (WINWORD.EXE)
Type data
MD5 50a0256e33cbfd2d2e7e8233160b16ca
SHA1 c4a142e1cf81ad0d6bb0ce3325c82b6fed0bf945
SHA256 5d6ef4d41e9968fbcc41225c7d54abbf163dfd1e4215af725a624fa8367f2c86
CRC32 644E0582
ssdeep 384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOfeaHrJKtsZVKJYFL:58BGToSqsxmhBDiUG7LffX1VZ
Yara
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name d94cbf8d06cd947d_~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc
Size 162.0B
Processes 2552 (WINWORD.EXE)
Type data
MD5 4b9f88af02df0db625ae4133e6245654
SHA1 abce77c1e2566344bc5c66b0822b2d569e3284b0
SHA256 d94cbf8d06cd947d9117f12ed211a35e111cfef47f69579da880d4d5589387a1
CRC32 41595EAF
ssdeep 3:yW2lWRdvL7YMlbK7lhZtniWl/:y1lWnlxK7RtnX
Yara None matched
VirusTotal Search for analysis
Name 55f5c3be4f5da2dc_~wrs{e8f9ec34-8c29-441b-89c0-df56523e0ebd}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E8F9EC34-8C29-441B-89C0-DF56523E0EBD}.tmp
Size 1.5KB
Processes 2552 (WINWORD.EXE)
Type data
MD5 b6e3e52488ac7b6304a7428577830d34
SHA1 f5af837a7d4e25d3944a475a2a35cd8a8c4db886
SHA256 55f5c3be4f5da2dc7b276cf4fcf4094a99793b14de8c158232f76ed94c0fe6c7
CRC32 69C8F3F0
ssdeep 6:IiiiiiiiiiE/bYflo3dc8++ZYSySkssqA1+tKHol:S/XtG+aSpk1j1+tKHol
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size 1.0KB
Processes 2552 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis