popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 9f2a4b56d35eac13_update_1.7z
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\updates\update_1.7z
Size 180.0KB
Processes 1792 (update.exe)
Type 7-zip archive data, version 0.4
MD5 d472d6206090822fbb5ce511479380e8
SHA1 c787d0a60a53f9f011317f9e754472d7a119e29a
SHA256 9f2a4b56d35eac132064acd473eda3015160a827edbb0107c5df22bd1de9ce1e
CRC32 DAF2F775
ssdeep 3072:tOziJBkeBgA9XprAZXGKAh2EFkKLfno8OlPIloJinlqpxqBVd:dJBkeKmxTd0ECgoRPeACeOVd
Yara None matched
VirusTotal Search for analysis
Name cda027ec6e04d645_resources0.xml
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\resources0.xml
Size 9.2KB
Processes 1792 (update.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 6f2d3f0f9b04c8ca09e5b3db1fd2dcf6
SHA1 d4880d977c8c74175e6b865db1371e94a84abaa9
SHA256 cda027ec6e04d645a64ebba00c4af7f7c9212a15e40089ee4d470738de6a4771
CRC32 782A5DAD
ssdeep 96:8FD9SAHe5GWb7+o+DGvdzPW2djnoHNGjoIaYXFoOv81dyTF6omBB:8zS8WHHU2Zot+aYrqdyTFQ
Yara None matched
VirusTotal Search for analysis
Name 1e997ac3340205e4_cabal.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\cabal.exe
Size 102.5KB
Processes 1792 (update.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 c0b915db483249fbb011d4c73d0dbf1f
SHA1 b582d08e6d087573a20c67bda4d5a28d190d831a
SHA256 1e997ac3340205e49c67004ba0d78f67e4696eaaecaa239e6aa8bdb357496ab9
CRC32 DFE03B56
ssdeep 1536:1jOHRPqUVgGanX+DFVZHJqtBy3dbEKshUtjG9X4n4PZHJqtBy3dbTZH1ttBc3dbj:gRTV9uX+/tktGn8cGVtktGZtXt4d
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 917d0908b4371943_main.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\main.dat
Size 171.0B
Processes 1792 (update.exe)
Type Maple help database
MD5 5c76d529171bd1e07e258d342ac7e59c
SHA1 9781c06569223e24614137e8914ea2cc85bd0fc6
SHA256 917d0908b4371943c4168344a36bd3f862685bc29450a18ea93acfb111dc9dec
CRC32 3757D97D
ssdeep 3:oll9llulnlvlklsl1lslslslslslslslslslslslslslulfltltlsltl5ll:olWycWWWWWWWWWWWWWUt1tW1
Yara None matched
VirusTotal Search for analysis
Name e5f6ed0c70d8e2e1_mainex.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\mainEX.dat
Size 285.0B
Processes 1792 (update.exe)
Type data
MD5 242b66f61d075f06316774148ed7b361
SHA1 ee9f46a214cf07be556f91ae755ed3f0d69e0878
SHA256 e5f6ed0c70d8e2e172f0decd93ceec55341dc6d0dc910308129f364645f64180
CRC32 7718D350
ssdeep 6:TwHzdt1t191qNWWWWWWWWWWWStg1WW1tWpslXd1:UBH3qUoEXX
Yara None matched
VirusTotal Search for analysis