Dropped Files | ZeroBOX
Name 48e31015dd936d82_discoversophiisticated.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\discoversophiisticated.exe
Size 798.8KB
Processes 652 (discoversophisticatedpro.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 6f062c57d7d501104d8538c2ede071c1
SHA1 df8a336f92ab46839d8ea5d82eadb6f41dd57508
SHA256 48e31015dd936d822ca6d8f975cf82490061d122ac3e6202602311447a727153
CRC32 97DEB830
ssdeep 12288:J+Pf3tCttUwumzde6FsL6F9anlt+WwDb3mRHigKM+LZ2bUYq7zeLvnr:UPldmZvs69anls7YCgKHZ2bUYi8nr
Yara
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • OS_Processor_Check_Zero - OS Processor Check
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name d5030deb15b90491_discoversophisticated.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\discoversophisticated.exe
Size 798.8KB
Processes 652 (discoversophisticatedpro.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 3728c32327985f5781c35469740bde8c
SHA1 3c720ef1c093446c80efc3751b93864af40aef2a
SHA256 d5030deb15b90491070d3aabcf21331b87687eda2a7032c0b3d7dc43bb071077
CRC32 BB64717D
ssdeep 24576:Y6Ss+in6g5QWTTBM79U1FDGF1SGP8sOnr:Rj5ESGP8s6
Yara
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • OS_Processor_Check_Zero - OS Processor Check
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis