Dropped Files | ZeroBOX

Name	5a7766122df2a7a3_3.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\3.exe
Size	653.5KB
Processes	2556 (2.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`af5e43c1f6e30312ef4e4f069a73e5db`
SHA1	`6639fb199099229a5c96bbc32d29541c756826aa`
SHA256	`5a7766122df2a7a328e38016b41c5a5d425dbbe27a6e60e04aeedc725f53fc8a`
CRC32	`E9A5550B`
ssdeep	`12288:Q+IEfJeRrECslH7Bz4PuJ0EV5ojoOQ2k:QDUkslb14nEfoQ2k`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE64 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	fb9fc07f982ffe82_2.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\2.exe
Size	9.8MB
Processes	2556 (2.exe)
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`b0180ad6226958880bdda93ee99e1b9a`
SHA1	`e620d99dfdc3b490227f239111df2812ca04ce79`
SHA256	`fb9fc07f982ffe82ff90be6473113ebc60f7edba1471eaf4cb235b1965bf78dd`
CRC32	`96AE5D99`
ssdeep	`196608:qS/9i60wnJc2gNrDirYh/BRH37JOKVLr/XFNXDI02/LStn:qSjfnsNrDiUh/DoKVLrtNXDIhWtn`
Yara	PE_Header_Zero - PE File Signature IsPE64 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14___tmp_rar_sfx_access_check_10862531 Empty file or file not found
Filepath	C:\Users\test22\AppData\Roaming\__tmp_rar_sfx_access_check_10862531
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	e2a0aab5d777284d_1.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\1.exe
Size	358.5KB
Processes	2556 (2.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f78ad072355a856073df623d0595c975`
SHA1	`3a6de5e49803b2c47630f7df36cd9d42691b9ca5`
SHA256	`e2a0aab5d777284d5942c343b0e563e2f60ac92ac8a5e5022a3b0e6dab6ef46a`
CRC32	`9C4F0D72`
ssdeep	`6144:8DMGqKhdd3few/fth2f7swehrA8/l9PzuBBLVhO6SAOvGQSTE1:8D/73D/Vh2fdkrp9Cu6S0vE1`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis