Dropped Files | ZeroBOX

Name	a0051c45198cfb2e_dll03.ps1 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll03.ps1
Size	1.0KB
Processes	2864 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CR line terminators
MD5	`b5ff5f7bedac2766276c63b88c2ac5f1`
SHA1	`b3401bb57770764ad46f7a9eb874f7e4d7f28522`
SHA256	`a0051c45198cfb2ea415bdbfbb88ece1f84e7b0e530c05116ba6ba1f4e111d25`
CRC32	`BBB463BF`
ssdeep	`12:QBAlVgX/Q1Qsz8MFclzJRFjPrMTE1rlKu1S1AeyLg8aXNeTcvHlLq/WtuUKld9/Z:QB4gY8MuZJvPXjwAJD6NeIvH5q/Q6SqL`
Yara	None matched
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RF226511a.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF226511a.TMP
Size	7.8KB
Processes	2744 (powershell.exe) 2864 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	48912963451c1773_dll01.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll01.txt
Size	148.0B
Processes	2864 (powershell.exe)
Type	UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`a82d9df429d208efba55d9e2f76e86dc`
SHA1	`b4ef02df41b0b51e0814325b3fb25ceeaabb8591`
SHA256	`48912963451c1773584fdf382c4c5acde590649b91e3fac2b3ea0ff4b84bdc69`
CRC32	`A7F09613`
ssdeep	`3:IRR8fVHElMKKhmHEVZBgyGLERk9uEh38RqLYYC5ZU+Uv:s0tElLZHyiycVph3H6k`
Yara	None matched
VirusTotal	Search for analysis

Name	b3d510ef04275ca8_dll02.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll02.txt
Size	2.0B
Processes	2864 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with no line terminators
MD5	`f3b25701fe362ec84616a93a45ce9998`
SHA1	`d62636d8caec13f04e28442a0a6fa1afeb024bbb`
SHA256	`b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209`
CRC32	`88F83096`
ssdeep	`3:Qn:Qn`
Yara	None matched
VirusTotal	Search for analysis