Dropped Files | ZeroBOX

Name	290158842dd990a6_tmp1924.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp1924.tmp
Size	1.6KB
Processes	5620 (e4FCQDgPSTuqIGC.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`3b67180eb442fb0b7ab3ecf39bb44a94`
SHA1	`f2108643f1f44b303d0566c0020870e9317196df`
SHA256	`290158842dd990a6ec4bbadcb9acf3da154c99deba1c7bf5044f36edf84345c3`
CRC32	`1BDED0BC`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBostn:cbhf7IlNQQ/rydbz9I3YODOLNdq3y6`
Yara	None matched
VirusTotal	Search for analysis

Name	738041646987292e_ntijxxhtyaco.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\nTIJxxhtyaCO.exe
Size	815.5KB
Processes	5620 (e4FCQDgPSTuqIGC.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`3037770cf30880d8b9c12d50fb2a668f`
SHA1	`7bf703f3bcaea4a98664d251598d80820c33d285`
SHA256	`738041646987292e3481975de9ec549f92af376f912942f049b66d432d4c2cac`
CRC32	`6D16B6C6`
ssdeep	`24576:LAlkIXNeeN1teAkKbNKos17tjwe1mPw0e0z5i2R4DRJ1Khd:iXNeeN1teAkKbNKos1Bse192uk`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_EXE - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check Win32_Trojan_PWS_Azorult_Net_1_Zero - Win32 Trojan PWS .NET Azorult Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal	Search for analysis