Dropped Files | ZeroBOX
Name 35af5b2c4e687025_ure.bat
Submit file
Filepath C:\providernet\Ure.bat
Size 81.0B
Processes 2632 (1358.exe)
Type ASCII text, with CRLF line terminators
MD5 8c02d3da0e92988d7e530f74f9ca71ad
SHA1 4c5d95c80c77c7d518937890869735f9adef1a9c
SHA256 35af5b2c4e68702511da796ff1c14d17e1688789e6c5276fa3cdf1d81517e40b
CRC32 252F9396
ssdeep 3:0S6tCAyt190F7x/CvXtWaJk:r6gAUYd/SXtWae
Yara None matched
VirusTotal Search for analysis
Name fce7b188a2a98c8e_x8ndidjje6r5db71l3z1p31diatqyiqkyh.vbe
Submit file
Filepath C:\providernet\x8nDiDJje6r5db71l3Z1P31DIATQYiqkyh.vbe
Size 193.0B
Processes 2632 (1358.exe)
Type data
MD5 9292b70aa1aa44e237d094d63a883ec9
SHA1 9bfde879176757a225709f0126d319191bcc540b
SHA256 fce7b188a2a98c8e9dbeb6f24e0608d0e54ccd0f1134684beb5757380e6dc4f9
CRC32 F825F9EB
ssdeep 6:G9t2wqK+NkLzWbH3WrFnBaORbM5nCeSOOCDRf1:G9FMCzWLmhBaORbQCcO4R1
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14___tmp_rar_sfx_access_check_1261484
Empty file or file not found
Filepath C:\providernet\__tmp_rar_sfx_access_check_1261484
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 2a82a55b6542aa95_BAWHCtE00Z.bat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\BAWHCtE00Z.bat
Size 203.0B
Type DOS batch file, ASCII text, with CRLF line terminators
MD5 43f95afa483059a09780e3963479eb76
SHA1 a075cffe1a9e8c3f5d982cfd3e937e512d3557ce
SHA256 2a82a55b6542aa95ee084567aeba1baf6281bfbc7d14502a2a87cad779ea0ab3
CRC32 93B47530
ssdeep 6:hCijTg3Nou1SV+DEd/psKOZG1mQpcLJ23fnFyH:HTg9uYDEd/7OLM+
Yara None matched
VirusTotal Search for analysis
Name e8cb92132ebbb63c_fontcrt.exe
Submit file
Filepath C:\providernet\Fontcrt.exe
Size 1.8MB
Processes 2632 (1358.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 7f31bb081094ce34a47e42c87f228616
SHA1 7f737ad8703c4ab048640437ed628c8ffeab7983
SHA256 e8cb92132ebbb63c1a4c442cb94d0dd075d44abe8de3bc1ba19ee0e856b37ae8
CRC32 697605E1
ssdeep 49152:SF9Gb4U5seqUtNOaTqlmjUfdrtRVaHfLta0W:SrG7qULBUcLta0
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis