Dropped Files | ZeroBOX
Name 3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size 7.8KB
Processes 940 (powershell.exe)
Type data
MD5 6fd29def73b2779e0ae71c4eecd304f7
SHA1 4ba660e4db856e04eb93a01c59ee764259ec55e7
SHA256 3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6
CRC32 1F966CD8
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 8da12c8de54a9f6d_temp_script.ps1
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\temp_script.ps1
Size 879.0B
Processes 1664 (chisel.exe)
Type ASCII text
MD5 f165d3cb67177fda29adccfbf3420c61
SHA1 a26277c70b1527b415b8b03aa7cc753db06e6b2b
SHA256 8da12c8de54a9f6d29b9cd237b5a435c03afbf2f42e18c418d3e4cdca3699639
CRC32 D1683859
ssdeep 24:C5OpN6MIVMKAN+vpY06Cgipr3/gw6W/A7X:BpN26NQECDpTow3/A7X
Yara None matched
VirusTotal Search for analysis