Dropped Files | ZeroBOX

Name	9efdd352033d7dfb_dll03.ps1 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll03.ps1
Size	964.0B
Processes	2876 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CR line terminators
MD5	`53e9ab85b74c68cd099945813e6fa114`
SHA1	`19592eb06b70990e31aac84877e95822bf2aff99`
SHA256	`9efdd352033d7dfb25a2f26e13b4cd7cd6e6dcb659d4c1264fc8f885640c9da8`
CRC32	`0D6C788A`
ssdeep	`12:QBAlVgX/Q1Qsz8MFclzJRFjPrMTE1rlKu1S1AeyLg8aXNeTcvHlLq/nbKPl/Q1Do:QB4gY8MuZJvPXjwAJD6NeIvH5q/nW64L`
Yara	None matched
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RF1a620c2.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF1a620c2.TMP
Size	7.8KB
Processes	2776 (powershell.exe) 2876 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	48912963451c1773_dll01.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll01.txt
Size	148.0B
Processes	2876 (powershell.exe)
Type	UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`a82d9df429d208efba55d9e2f76e86dc`
SHA1	`b4ef02df41b0b51e0814325b3fb25ceeaabb8591`
SHA256	`48912963451c1773584fdf382c4c5acde590649b91e3fac2b3ea0ff4b84bdc69`
CRC32	`A7F09613`
ssdeep	`3:IRR8fVHElMKKhmHEVZBgyGLERk9uEh38RqLYYC5ZU+Uv:s0tElLZHyiycVph3H6k`
Yara	None matched
VirusTotal	Search for analysis

Name	b3d510ef04275ca8_dll02.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll02.txt
Size	2.0B
Processes	2876 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with no line terminators
MD5	`f3b25701fe362ec84616a93a45ce9998`
SHA1	`d62636d8caec13f04e28442a0a6fa1afeb024bbb`
SHA256	`b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209`
CRC32	`88F83096`
ssdeep	`3:Qn:Qn`
Yara	None matched
VirusTotal	Search for analysis