Dropped Files | ZeroBOX

Name	3a255c0024916f19_590aee7bdd69b59b.customDestinations-ms~RF2154083.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF2154083.TMP
Size	7.8KB
Processes	2156 (powershell.exe) 2644 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e98cbf1c5f26f7a5_gam.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\IXP000.TMP\gam.bat
Size	12.7KB
Processes	516 (HEXABOT%20-GAMBL%C4%B0NGV2.0.exe)
Type	DOS batch file, UTF-8 Unicode text, with very long lines, with CRLF line terminators
MD5	`c0bcec2ed74752892d9b06a8f86965c7`
SHA1	`5695d0e896b986c18ad3cd3f5d6a176283e1bf4d`
SHA256	`e98cbf1c5f26f7a5a2c77b33f87d85a10ec20d82a2b6f82e271ee881c1a28dc6`
CRC32	`0D73AAFF`
ssdeep	`192:vOgsMvGCbeWP/tuHFB1f22QrXUHcVZBZNc02BrfF0e5VGqBw3m77apwqx/nLTLvO:m2xibzfAZ2Bue55ka7ti3VfEE0`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis