Dropped Files | ZeroBOX

Name	74d15e9cf0bdf679_fontcrt.exe Submit file
Filepath	C:\providernet\Fontcrt.exe
Size	1.8MB
Processes	700 (1243.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`d27cc729bca5e6ad9727aa35690fffb2`
SHA1	`33cf8ba7547cbdda78f6b8a9787cacd63979aa47`
SHA256	`74d15e9cf0bdf6799a4776d3533a39fef0843d9e0b502821d38bc84acd18e73e`
CRC32	`451BC2FA`
ssdeep	`24576:r2aYw1iK8zszXtLLW2hANLOBZqpCihkMx/XoS479eZu8uK79Qjsb2fMY:yU1Fda2hANIZqPhkMx/YS45eFuqCjwT`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult Is_DotNET_EXE - (no description) IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	f3fa9ebaacd2c3e0_sichapkygyp2tahbw5h5pr.vbe Submit file
Filepath	C:\providernet\sicHapKyGYP2TAHBW5h5Pr.vbe
Size	208.0B
Processes	700 (1243.exe)
Type	data
MD5	`669a4e2ea59b0e2ff15bef030e695924`
SHA1	`b016201694975d584f16943708cb3fad4909aa85`
SHA256	`f3fa9ebaacd2c3e0673a47cc3436a7348b95f7800417766a8955283ab9d81806`
CRC32	`5670187E`
ssdeep	`6:GogwqK+NkLzWbH3WrFnBaORbM5nCeSOOm+RO2e0Os:GoBMCzWLmhBaORbQCcOVOJ09`
Yara	None matched
VirusTotal	Search for analysis

Name	54767e3fe232d7a9_qqkunrkpwtlo4qlmy6.bat Submit file
Filepath	C:\providernet\qQKuNRKPWtLo4QlMy6.bat
Size	94.0B
Processes	700 (1243.exe)
Type	ASCII text, with CRLF line terminators
MD5	`06d7929a891f8c17155c08a521aeb8b1`
SHA1	`d8861cce66b9abf852232bd6306a14bacbacb1d8`
SHA256	`54767e3fe232d7a9ada937999adcfccab577c58ae1888b21c4437a4419bac68a`
CRC32	`618ACADA`
ssdeep	`3:jIcyw022lX2mUvs4ovV7B8Xx/CvXtV/8BpYcn:lyBgjUrs/SXtVQdn`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14___tmp_rar_sfx_access_check_15055218 Empty file or file not found
Filepath	C:\providernet\__tmp_rar_sfx_access_check_15055218
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis