Dropped Files | ZeroBOX
Name 56deefa3e5f170c0_losscommunication.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\IXP000.TMP\losscommunication.exe
Size 8.5MB
Processes 2552 (losscommunicationpro.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 166f1ad8cc66c02920576eb3eeef98a6
SHA1 44008ac6ab782bdcba662b8bde9c69f39c07334e
SHA256 56deefa3e5f170c045ab28f8db2f5a0cac6038e6516662f3b277082320f441be
CRC32 1E8E908E
ssdeep 196608:PT4lrHK73qy+djjzw2mfcwPxO/XiKkaXO1sH0tYhZg8NimUlVIufIk:PT4lrHerc8O/X1X+1aZSf
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Is_DotNET_EXE - (no description)
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis