Dropped Files | ZeroBOX

Name	44bfa7a49f3c14ef_tmp16A6.tmp.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp16A6.tmp.bat
Size	151.0B
Processes	840 (None) 2704 (cmd.exe)
Type	DOS batch file, ASCII text, with CRLF line terminators
MD5	`29a592232f51cb5d7de4ca3c7ff6ae3a`
SHA1	`dffc5f672217ee7f5be83a1f2908dfd7713549bf`
SHA256	`44bfa7a49f3c14ef3057c564101cf2ed51f5bd686e030ed0c0d673c888c6aaa0`
CRC32	`5CC656DB`
ssdeep	`3:mKDDCMNqTtvL5omWxpcL4EaKC5GJymqRDmWxpcL4E2J5xAInTRI+TkT8HVZPy:hWKqTtT6mQpcLJaZ5GYmq1mQpcLJ23fO`
Yara	None matched
VirusTotal	Search for analysis

Name	12b1e5e8d4318208_asynp.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Asynp.exe
Size	111.5KB
Processes	840 (None)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`b5953f71d7caba8a79db276bc0d15b55`
SHA1	`e0b204515755b4eddb6783728d8c9eb2b162ae2a`
SHA256	`12b1e5e8d4318208c0bcecdacd4c6d0fcdda31d423ec1d30a3a7577c4695f19f`
CRC32	`AC9AEE11`
ssdeep	`1536:7uWt1TwlZ2qKYDy3bCXSLOTUdOywKyLDTV+x:7uWDTwlZ2qHDy3bC8IzKyLsx`
Yara	Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file Malicious_Packer_Zero - Malicious Packer AsyncRat - AsyncRat Payload PE_Header_Zero - PE File Signature IsPE32 - (no description) Is_DotNET_EXE - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis