Dropped Files | ZeroBOX

Name	3e16c4164bec2e7c_qvepylau.z Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\qvepylau.z
Size	118.3KB
Processes	2672 (marcopack2.1.exe)
Type	data
MD5	`4914a24a75a8d9f09bcc9823547206d5`
SHA1	`80737aab1e10bd124c12d8002abb51947ab3a45e`
SHA256	`3e16c4164bec2e7cb59fb281b2507405cace9b5e7b59a5933d2c93445a87cb42`
CRC32	`7B1A4FD8`
ssdeep	`3072:PcXE5+FabKlgqTKGdNN0BVBZCY/qoHbvrMkfTz2B4g:0XZabKMGdNNyBUZoHTDeB7`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nslF77F.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nslF77F.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	c0fb4b74f0d26926_bficsgotez.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\bficsgotez.exe
Size	84.5KB
Processes	2672 (marcopack2.1.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3bde622bfa7a14ea5c2730543d7b0d10`
SHA1	`32165962525dcffaa79f24c79a45c4caba12d61c`
SHA256	`c0fb4b74f0d26926680cbb7cda2fd21412061cd0169b4ab96e9f2561f508cd47`
CRC32	`7887A674`
ssdeep	`1536:SuKWdOgJeofFMKPSBPZ8+naOdxiQ4YSPVwTc1swWoubmfs7ATpOpoPwzXeY:rOgJeot8BPZmOdxi+S9B1sPJFATCzuY`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) Network_Downloader - File Downloader PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis