Dropped Files | ZeroBOX

Name	a31dbd6f7416f150_conted.vbs Submit file
Filepath	C:\Users\Public\Conted.vbs
Size	688.0B
Processes	2196 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`110da9d3474ba64fa1a18c173685c25d`
SHA1	`9f093829518a9268bf9807fda7bef47e7832c497`
SHA256	`a31dbd6f7416f150403c19be69f02d5e8608f5e7fae88a29831d40db15849b60`
CRC32	`0D5FA9B7`
ssdeep	`12:VtAFNUupNO4gLM9Zdt4xhI1O9ZgT3MBdx9Z+/SpR9TzFdWNc5RNey/Spn:/AYupw42kT3MP4/QvMmRNZ/6`
Yara	None matched
VirusTotal	Search for analysis

Name	cba344447d8228d8_conted.bat Submit file
Filepath	C:\Users\Public\Conted.bat
Size	205.0B
Processes	2196 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`759278dd3dc3679bf7efd1ec681c0aa1`
SHA1	`72b37494696deea940ac75b4c4e06e2b6ce419ef`
SHA256	`cba344447d8228d88c93d64ffdcda1de8562ef41adc4901191548e00bbfc5f19`
CRC32	`F04CFDCC`
ssdeep	`6:E2DmR9bGnIvWW9LR9II1R3KbQO0cvfp1aHWHoc924Nivy:Vm7SnIOW/mI1kbQpcvfpIa/ia`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2196 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis