Dropped Files | ZeroBOX

Name	5a7766122df2a7a3_3.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\3.exe
Size	653.5KB
Processes	2552 (2.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`af5e43c1f6e30312ef4e4f069a73e5db`
SHA1	`6639fb199099229a5c96bbc32d29541c756826aa`
SHA256	`5a7766122df2a7a328e38016b41c5a5d425dbbe27a6e60e04aeedc725f53fc8a`
CRC32	`E9A5550B`
ssdeep	`12288:Q+IEfJeRrECslH7Bz4PuJ0EV5ojoOQ2k:QDUkslb14nEfoQ2k`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE64 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	fb9fc07f982ffe82_2.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\2.exe
Size	9.8MB
Processes	2552 (2.exe)
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`b0180ad6226958880bdda93ee99e1b9a`
SHA1	`e620d99dfdc3b490227f239111df2812ca04ce79`
SHA256	`fb9fc07f982ffe82ff90be6473113ebc60f7edba1471eaf4cb235b1965bf78dd`
CRC32	`96AE5D99`
ssdeep	`196608:qS/9i60wnJc2gNrDirYh/BRH37JOKVLr/XFNXDI02/LStn:qSjfnsNrDiUh/DoKVLrtNXDIhWtn`
Yara	PE_Header_Zero - PE File Signature IsPE64 - (no description)
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14___tmp_rar_sfx_access_check_26462375 Empty file or file not found
Filepath	C:\Users\test22\AppData\Roaming\__tmp_rar_sfx_access_check_26462375
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	1a1620f64a077b56_1.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\1.exe
Size	6.4MB
Processes	2552 (2.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`cf5e507517d7741194b0d7f4383a384b`
SHA1	`19ceaa9f980391d30868d1be3f381c7615e1e7a4`
SHA256	`1a1620f64a077b564edf80b0a288ba95bb6bca52ee52cd1277b95fd8309435f0`
CRC32	`C41BFFD0`
ssdeep	`98304:ypc4Odb8V3ZZYzuX6GG6f78bMkhEsotAfIpuvTtCTfRcaKQWZW/get9sio1Uh4Z:ymNdY3ZWkh9zW1ytNVTuaHWZgg3Ch4Z`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis