Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsaF136.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsaF136.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	469db25c27f6beae_odzmg.v Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\odzmg.v
Size	503.3KB
Processes	2564 (shedremko2.1.exe)
Type	data
MD5	`a710e5322b206d5ffb49718e52a40b1d`
SHA1	`cf1674c1cd27d28a94aa3067a1c69f3303068c48`
SHA256	`469db25c27f6beaec13ec727b46d2b0314e03d067fc111d59d041539280cd963`
CRC32	`64E12E71`
ssdeep	`12288:/lmeQucS63PIhEagQDiwQAn/Y/NJzw6OCX:/Rfc/IhswQI/Yk6R`
Yara	None matched
VirusTotal	Search for analysis

Name	295e9ce2ed0ab47b_lqqdtfofke.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\lqqdtfofke.exe
Size	154.5KB
Processes	2564 (shedremko2.1.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`b699ae0b6b5ba65d42b3c174e93380a8`
SHA1	`d23a567cb2f512b8b0e8bbf00fb1581926a39118`
SHA256	`295e9ce2ed0ab47ba5f1c3b92d46c84e37fc16cd66897bd75079d2ae72ff5a50`
CRC32	`DBD2318C`
ssdeep	`3072:Oy5RpzyJNpYaBD3WmjjlGSc8Wx7NZ+7Nc0ag9geCzAkM1Ya:OyfiPnhfc8Wpi7z`
Yara	Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis