Dropped Files | ZeroBOX

Name	c4e0af18aa1069ff_explorti.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\ad40971b6b\explorti.exe
Size	1.8MB
Processes	2560 (amadka.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`29af55c68d51c9ef3c35850bec56664d`
SHA1	`6e050f9b50ed1e6f81719951bb932dedd13e844f`
SHA256	`c4e0af18aa1069ff5e0468ed2c5b0e08b3cf453752ca73f59a88223d72a8d20e`
CRC32	`EEA04C75`
ssdeep	`49152:M+f8i6m4axMrP/NDavx27Zyz7wCkP/PsPKLkBO3iJMBBwjxOT:Mi8baxMrP/NYoZyz7wJ/PsE/3wg`
Yara	PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_1a36f4d117.exe Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\1000006001\1a36f4d117.exe
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	393ef4a51cba8c25_explorti.job Submit file
Filepath	C:\Windows\Tasks\explorti.job
Size	274.0B
Processes	2560 (amadka.exe)
Type	VAX-order 68k Blit mpx/mux executable
MD5	`6ca9c8e3241df8b65fb4887014f0c1a0`
SHA1	`b46a930bc3966857aec679cb30bdcd5c8fcb3e3a`
SHA256	`393ef4a51cba8c25377da9c9c71398b81ffef2e1477c284c770e1e1768591404`
CRC32	`7263821D`
ssdeep	`6:Z9QXZFtXE/Xm/UEZ+lX1QYShMl6lm6tI4y0l1mU0ut0:QXZFZkW/Q13vgc4V1Out0`
Yara	None matched
VirusTotal	Search for analysis