Dropped Files | ZeroBOX

Name	279f8732177bca87_tmp6BDD.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp6BDD.tmp
Size	1.6KB
Processes	1080 (phonebook.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`589cdfe5de71315bf984a66adc2d8ca7`
SHA1	`c244c873ff6b0dc5e86322537c36dd70d56e2c6e`
SHA256	`279f8732177bca87a956c295623202bb2289a9411f9329d1f5436e20a69fcfe1`
CRC32	`DCD11C7F`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBVtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3N`
Yara	None matched
VirusTotal	Search for analysis

Name	6ed53f6643dcd369_euzwlhdgc.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\euZWlhDgC.exe
Size	757.5KB
Processes	1080 (phonebook.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`0c023de3d922fd90f310e6a02fc74d35`
SHA1	`993a3d154d982b82cf06cc9bf5ce29128118aed3`
SHA256	`6ed53f6643dcd36904ac60d32e8f0966d71bc8445d5295cb0414b7229f1864df`
CRC32	`39AF6026`
ssdeep	`12288:OnWmm+3NwEZFsak0tGRgt41Rj+bzwf6p5:OnJm+zTHKgt41Rjms+5`
Yara	PE_Header_Zero - PE File Signature Zero Win32_Trojan_PWS_Azorult_Net_1_Zero - Win32 Trojan PWS .NET Azorult IsPE32 - (no description) IsNET_EXE - (no description) IsWindowsGUI - (no description)
VirusTotal	Search for analysis