Dropped Files | ZeroBOX

Name	750cbb14a3ab56a0_mokajotabet.exe Submit file
Filepath	C:\ProgramData\kanovemamal\mokajotabet.exe
Size	128.0MB
Processes	1020 (None)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3731129d7a82c7b731c1f3682af747a6`
SHA1	`12e7d5f993ed71b5abf970e83cca8c9a5914280a`
SHA256	`5a68368ead353661c8f9c668b55353d9ce363bafd3d21b4aa5b536a71ba00075`
CRC32	`AC3F6F81`
ssdeep	`196608:Y6DSjSHA4ffZI38kBPfacCmpCAZekM5+lqk2:DDs74fydBC6DG5qql`
Yara	themida_packer - themida packer PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	dc93e39fe93819cd_mokajotabet.exe Submit file
Filepath	C:\ProgramData\kanovemamal\mokajotabet.exe
Size	128.0MB
Processes	1020 (None)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3731129d7a82c7b731c1f3682af747a6`
SHA1	`12e7d5f993ed71b5abf970e83cca8c9a5914280a`
SHA256	`5a68368ead353661c8f9c668b55353d9ce363bafd3d21b4aa5b536a71ba00075`
CRC32	`AC3F6F81`
ssdeep	`196608:Y6DSjSHA4ffZI38kBPfacCmpCAZekM5+lqk2:DDs74fydBC6DG5qql`
Yara	themida_packer - themida packer PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	7ed7b99d4b1721ed_mntemp Submit file
Filepath	C:\ProgramData\mntemp
Size	16.0B
Processes	1020 (None)
Type	Non-ISO extended-ASCII text, with no line terminators, with escape sequences
MD5	`5c74290156bfe328c3fd4d3d1b8bc831`
SHA1	`e5a9f1d2896f5d704b4c9daa8e42c4c1d10b9db5`
SHA256	`7ed7b99d4b1721ede12687b1cb645f7fa830a26d4dbcd7e40e22b98a0f127974`
CRC32	`34B055D2`
ssdeep	`3:nRbJinD:nnU`
Yara	None matched
VirusTotal	Search for analysis