Dropped Files | ZeroBOX

Name	b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RF37e5a1.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF37e5a1.TMP
Size	7.8KB
Processes	2740 (powershell.exe) 2836 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	f13ab70a212838da_dll01.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll01.txt
Size	148.0B
Processes	2836 (powershell.exe)
Type	UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`afe01ff31ec0a91a2d66fe057ad79f8c`
SHA1	`9db709b12eb1d9e579b32589737da2bfbede4550`
SHA256	`f13ab70a212838dae0155a91f76fb20902013246ced03102948a1a15d3b2fe87`
CRC32	`A140FC0E`
ssdeep	`3:IRR8fVHElMKKhmHEVZBgyGLERk9FKYRV38RqLY4XVf02GEBDDn:s0tElLZHyiycVyY3HhXShEVn`
Yara	None matched
VirusTotal	Search for analysis

Name	b3d510ef04275ca8_dll02.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll02.txt
Size	2.0B
Processes	2836 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with no line terminators
MD5	`f3b25701fe362ec84616a93a45ce9998`
SHA1	`d62636d8caec13f04e28442a0a6fa1afeb024bbb`
SHA256	`b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209`
CRC32	`88F83096`
ssdeep	`3:Qn:Qn`
Yara	None matched
VirusTotal	Search for analysis

Name	720a64d9025d6084_dll03.ps1 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dll03.ps1
Size	950.0B
Processes	2836 (powershell.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CR line terminators
MD5	`71012bcbf72d20e5e6dbe34e7dcf0aa9`
SHA1	`d54c3454916a5dfde4ace783ea34b92118b34ccc`
SHA256	`720a64d9025d6084be9eb694450585b127f7033bec8f54be54aa326ffd10c0e3`
CRC32	`36D5C27D`
ssdeep	`12:QBAlVgX/Q1Qsz8MFclzJRFjPrMTE1rlKu1S1AeyLpeTcvHlLq/mlGPl/Q1DhifOL:QB4gY8MuZJvPXjwAJpeIvH5q/tP65hTL`
Yara	None matched
VirusTotal	Search for analysis