popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 409734260e12a865_dylib.py
Submit file
Filepath C:\Python27\Lib\ctypes\macholib\dylib.py
Size 3.1KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 b292080ce02206bb2706f726463665f1
SHA1 1da328c861bbe70bf5fa868316a7d1a92e190879
SHA256 409734260e12a865c97ea7c996676c5b2f66631c9605b01435d2f960bbb3784e
CRC32 E16024A0
ssdeep 96:krQfRfEg+OYEk3veIOGQDPqyywmXwHtNTtX4rH:1fR1P+/TF3XgHtNaH
Yara None matched
VirusTotal Search for analysis
Name 63fb51d283bfa96b_test_bitfields.py
Submit file
Filepath C:\Python27\Lib\ctypes\test\test_bitfields.py
Size 10.4KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 4e477003e59d7e7f6cee2413c81c8eef
SHA1 ff31b634131d023ff2d6cbf29e40dbfd78760a09
SHA256 63fb51d283bfa96b18c263958bce294b7907f0f5bb982e3d3876b48eab3a188a
CRC32 7557E304
ssdeep 192:4CqLd5+o6UJ2r5S96Lq0xKIRcNICMcthkhKU98vsfHn:OLSy2096rKIGeClCQUmvKH
Yara None matched
VirusTotal Search for analysis
Name 55b8bd3260bef752_read_me.txt
Submit file
Filepath C:\Python27\Lib\ctypes\test\read_me.txt
Size 3.0KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 618369dfbab8c7b4b7502f261b3c592b
SHA1 7432b2f1b78554d447cf87417fe802ecd2e03cdd
SHA256 55b8bd3260bef75283220b0de7a07736bfbee2e2fb7af208fcd9a34069bde11a
CRC32 727E3885
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKtQ8:G3SdzJWEYZbd6QZ8b50gTk4/yk9oAtDQ
Yara None matched
VirusTotal Search for analysis
Name 76cdeba2242c792b_bdist.py.wctc
Submit file
Filepath c:\python27\lib\distutils\command\bdist.py.wctc
Size 5.9KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 65703282b0234968c2a2fb0f07ad38ff
SHA1 2eb515a733ccf66cb8774c6305b3b1892b83e121
SHA256 76cdeba2242c792ba9e11cb2a67ad1528af235c5d93362ffdc779c4545e3012d
CRC32 57343742
ssdeep 96:BO2CFglUl7quJN16KK43Xb83/NmWh3h5qZ9KDRBrXRVnN//ylTfGq/kSDtaUkIVz:BEQUhquJN1hZ3r83Fl3h5qWLXRRNChZ3
Yara None matched
VirusTotal Search for analysis
Name d2147a01314ad861_read_me.txt
Submit file
Filepath C:\Python27\DLLs\read_me.txt
Size 2.7KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 d3a9f73b400ff1324748b1c75977225a
SHA1 e4afe03580a251c86969f68b4b59297bef3178e3
SHA256 d2147a01314ad861ffc51fd2b780bef9bfa96c0bf948cbfdd025c98f1fbe8862
CRC32 4183BFE2
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKVQ:G3SdzJWEYZbd6QZ8b50gTk4/yk9oVQ
Yara None matched
VirusTotal Search for analysis
Name 699912bfdfba4104_bytes_methods.h
Submit file
Filepath C:\Python27\include\bytes_methods.h
Size 3.1KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 bbfccd1f239d158462df4d6aca0ef00e
SHA1 ca52758d81283f46a7b2e6fcddc2e6991b4f571f
SHA256 699912bfdfba4104363871aa84f8344c750d4f19da34b6ec44a8c498e36396ba
CRC32 F80BF18A
ssdeep 48:sc3gThak9Q6v69CFJ9yMohJpWeWhcumL01:sc3CFQ6vqq6DWewmL01
Yara None matched
VirusTotal Search for analysis
Name 3fbfd5ba4d50299a_read_me.txt
Submit file
Filepath C:\Python27\Lib\compiler\read_me.txt
Size 2.7KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 71c0a25470e37a436e939219b3e9c59d
SHA1 808c8b9df9b941bc85925ad77e6fcfb8e80af08c
SHA256 3fbfd5ba4d50299ab168e64f785a4c785febebe99f67fa5a3cfeb239c6be82af
CRC32 3ED2E5C7
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKm5n:G3SdzJWEYZbd6QZ8b50gTk4/yk9omitG
Yara None matched
VirusTotal Search for analysis
Name af9f521f9cffeed2_read_me.txt
Submit file
Filepath C:\MSOCache\read_me.txt
Size 2.5KB
Processes 2552 (DeathRansom_1.exe)
Type ASCII text, with very long lines, with CRLF line terminators
MD5 a1c18045d28b28ccdd64825029852c3e
SHA1 0acba779faffbeaef9a00cd64f52297d92f532b3
SHA256 af9f521f9cffeed20477bf4c5eb9713f2ef75fd4494640053661f22730118698
CRC32 99196753
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKq:G3SdzJWEYZbd6QZ8b50gTk4/yk9oq
Yara None matched
VirusTotal Search for analysis
Name 3b15a7ac4f6c866c_read_me.txt
Submit file
Filepath C:\Python27\Lib\bsddb\read_me.txt
Size 2.7KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 eca0d40b35016ac2157bd25956552c21
SHA1 3151503bf20810dba184b7099f2e0b7d630043da
SHA256 3b15a7ac4f6c866c38381feab6c8f8c3b559f243ef41111ca90ec77c40929396
CRC32 83D2C126
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKnMl:G3SdzJWEYZbd6QZ8b50gTk4/yk9o27LH
Yara None matched
VirusTotal Search for analysis
Name 76bf72a6395c3231_read_me.txt
Submit file
Filepath C:\Users\read_me.txt
Size 2.7KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 cbc266946992bf243dae9db72a9fb7c8
SHA1 2a65454c9ceb0e42a17b7904c61f53783c441bc8
SHA256 76bf72a6395c32318cd387611eb49ec287d2ea206b36ad20590e59c330eff3c2
CRC32 957B57B6
ssdeep 48:po3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/FcRaf9rpKmkX:G3SdzJWEYZbd6QZ8b50gTk4/yk9ov2Tw
Yara None matched
VirusTotal Search for analysis
Name fb75c74674c07dcc_read_me.txt
Submit file
Filepath C:\GPKI\read_me.txt
Size 2.7KB
Processes 2552 (DeathRansom_1.exe)
Type data
MD5 855125e75fc6336c0ec7dcc1f3bd529b
SHA1 ab693abae790b35388ed82a9a252e12d81cdd8e6
SHA256 fb75c74674c07dcc8946217497664ab2993b7800c76977aa20aae33ed8fdd2b0
CRC32 ADD45351
ssdeep 48:8CC5JJC6yXo3K17lCNUzJQVbwpK1CG4JK/hbFX6QZ43iD3m9+y50c3TW9tPw/Fcy:WTvy43SdzJWEYZbd6QZ8b50gTk4/yk9d
Yara None matched
VirusTotal Search for analysis