Dropped Files | ZeroBOX

Name	3f57616aad7f78dd_k9vzgpst29kaljpb2rquk9vz.ps1 Submit file
Filepath	C:\Users\Public\k9vZGpST29kalJPb2RqUk9vZ.ps1
Size	708.5KB
Processes	2728 (powershell.exe)
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`fa0c7ef78bbed4f5a0d05219583f3b6f`
SHA1	`1c584ee82ef5ac9e1fc9d991312222abbbdb3b66`
SHA256	`3f57616aad7f78dd1b087414b2219dd704866c340716791c1b20452d4fd87cde`
CRC32	`FAC3C25E`
ssdeep	`3072:49KqylccWmDwZmT8VjG3/Dyqr4cwt9aU0ruzjzuJmmwc0/Kz0o+i/6n/cGyjBhK3:5+26xhfptqUk84LnO5mH9OdHUb3ngoe`
Yara	None matched
VirusTotal	Search for analysis

Name	4bd33af73be9da6a_k9vzgpst29kaljpb2rquk9vz.vbs Submit file
Filepath	C:\Users\Public\k9vZGpST29kalJPb2RqUk9vZ.vbs
Size	1001.0B
Processes	2728 (powershell.exe)
Type	UTF-8 Unicode text, with CRLF line terminators
MD5	`f23c6311937368a391ae7f1a20f353f3`
SHA1	`53c02ed76746bc693ba51f11f896bbf88338172d`
SHA256	`4bd33af73be9da6aea7e8c86f1b178d8cf143ddae78379d9350ccb107e4f903d`
CRC32	`F85186C6`
ssdeep	`24:ULlupw42GT35H4/6OJMMdV8ELMvMmRNZ/z:ULm2CyY3vBb`
Yara	None matched
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2728 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	98bde1eda0521375_k9vzgpst29kaljpb2rquk9vz.bat Submit file
Filepath	C:\Users\Public\k9vZGpST29kalJPb2RqUk9vZ.bat
Size	295.0B
Processes	2728 (powershell.exe)
Type	ASCII text, with CRLF line terminators
MD5	`b032577b9070ec04b20b017a13b80fe1`
SHA1	`456e02f79a9ef827d74a33640a226903915deda3`
SHA256	`98bde1eda05213754847ccc53758e69bda57349e459adf3c05fc20ce30696eea`
CRC32	`B12EE040`
ssdeep	`6:cR9bGnIvWW3WlqII1R3KbQO0cvfp1aHvY0xnWB24Nivy:c7SnIOWmlXI1kbQpcvfX0xWB/ia`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis