Dropped Files | ZeroBOX

Name	121d3896a1dc5920_run.bat Submit file
Filepath	C:\ProgramData\MicrosoftSystem\run.bat
Size	283.0B
Processes	2084 (123.exe) 2164 (cmd.exe)
Type	ASCII text, with CRLF line terminators
MD5	`b0233b26f99cd79a1540575c529b064f`
SHA1	`0fb1a6e82ec6671a92563d48b5384bc82a93a6f2`
SHA256	`121d3896a1dc59201ca4960728d4ca0bdd96e355cc0f5d1af5c217e8ed3b37ea`
CRC32	`3C271267`
ssdeep	`6:/GEXFQcsUki2ZnG2AWo1fooTDEXFQcsUBG26ogL/oNKG2PXjFQcnH1:OEVQc5kthAJfoCEVQc5Bh8zsKh/BQcH1`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14___tmp_rar_sfx_access_check_34915953 Empty file or file not found
Filepath	C:\programdata\MicrosoftSystem\__tmp_rar_sfx_access_check_34915953
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	544095b7f3493917_svchosl.exe Submit file
Filepath	C:\ProgramData\MicrosoftSystem\svchosl.exe
Size	5.2MB
Processes	2084 (123.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`9f478308a636906db8c36e77ce68b4c2`
SHA1	`369b818537e16c4c038ce0779bb031ba6980db9c`
SHA256	`544095b7f34939172ea5bd6544be4c82357921f3153d17ac0e4b1b93dc363de4`
CRC32	`DB9AE4AA`
ssdeep	`98304:qigKs0WHiaVQWJuhswoYv5eOaVczo0Ahd6y0Naxxv8fqDDAxNer84qqfW42n:XgnrHiauWJysVYvsO5oyMxxvjDDAxRqk`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE64 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	644c9745d1d2f679_wmiic.exe Submit file
Filepath	C:\ProgramData\MicrosoftSystem\Wmiic.exe
Size	365.0KB
Processes	2084 (123.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`a18bfe142f059fdb5c041a310339d4fd`
SHA1	`8ab2b0ddc897603344de8f1d4cc01af118a0c543`
SHA256	`644c9745d1d2f679db73fcb717dd37e180e19d5b0fc74575e4cefe4f543f2768`
CRC32	`C79B435E`
ssdeep	`6144:OI6VyDGb+HiFr4kchE18dkuCj7jLwcYBQkMH9O1BNI/H9O1BNIgqH9O1BNIVH9Oa:OIJDGb+Hiu9hE18dkxfCMo7I/o7Igqok`
Yara	Malicious_Library_Zero - Malicious_Library Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet PE_Header_Zero - PE File Signature IsPE64 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis