popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 80c3fe2ae1062abf_taskhost.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000397001\taskhost.exe
Size 196.0B
Processes 2812 (oneetx.exe)
Type HTML document, ASCII text
MD5 62962daa1b19bbcc2db10b7bfd531ea6
SHA1 d64bae91091eda6a7532ebec06aa70893b79e1f8
SHA256 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
CRC32 3C157CF3
ssdeep 6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
Yara None matched
VirusTotal Search for analysis
Name 563acabe49cc451e_oldplayer.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\oldplayer.exe
Size 198.0KB
Processes 2544 (newrock.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 a64a886a695ed5fb9273e73241fec2f7
SHA1 363244ca05027c5beb938562df5b525a2428b405
SHA256 563acabe49cc451e9caac20fae780bad27ea09aaefaaf8a1dfd838a00de97144
CRC32 C2E57BBA
ssdeep 3072:lWgR9+o+G2K47yLk6E9EzwHxFTTDYUSNt2kLu5gf7or7wy+wXRcWfnPjt:lWu+5a4ukZSwH/TT2NE4u5gTovv
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name f91e4ff7811a5848_latestx.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000521001\latestX.exe
Size 5.6MB
Processes 2812 (oneetx.exe)
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 bae29e49e8190bfbbf0d77ffab8de59d
SHA1 4a6352bb47c7e1666a60c76f9b17ca4707872bd9
SHA256 f91e4ff7811a5848561463d970c51870c9299a80117a89fb86a698b9f727de87
CRC32 1EC89FFF
ssdeep 49152:MMcDmMRlBdzs3EThgR0uEqBXLdcJAbtNmbOHaGhEospqOziZXAfrrARS7JL2ozPX:dcdrCET8XeospuZXAf0EJyocDKIVDT05
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
VirusTotal Search for analysis
Name c867c3bda7b6f6bd_31839b57a4f11171d6abc8bbc4451ee4.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\31839b57a4f11171d6abc8bbc4451ee4.exe
Size 4.1MB
Processes 2544 (newrock.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 81e4fc7bd0ee078ccae9523fa5cb17a3
SHA1 4d25ca2e8357dc2688477b45247d02a3967c98a4
SHA256 c867c3bda7b6f6bd228a4d7656c069bd6cf4f67ba4b075cf4113f5b109e7d9ee
CRC32 7316F824
ssdeep 98304:KLyb54rAVQD2esiID+dc0iOuFInEXs7kxS8It7QwMthknMlWb:K054wQD2znD21nu21kkMlS
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name bbd51015a08c4351_toolspub2.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000519001\toolspub2.exe
Size 226.5KB
Processes 2812 (oneetx.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 c054b59d8acd94091def95ac0eb1b21d
SHA1 e68d53a92b4da038658db809ace8a336f711b8db
SHA256 bbd51015a08c43511cac74f613bff1060a50c719bc882afe150e4d3c58033aaa
CRC32 348642B3
ssdeep 3072:pEgEEThQUWX4kOqi2L+gKtSKvqwQZ5UuRxr:6gEE9QUhk3ygKtSCqwh
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis