Cuckoo Sandbox

Name	0774e8ba0d8f7075_xbox.info.exe Download Submit file
Filepath	C:\Windows\Temp\Xbox.info.exe
Size	162.5KB
Processes	1020 (2ee1b31f269c9e78_xbox.info.exe)
Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`b9bbae62fff45d6be83f8addef75507f`
SHA1	`cac81eb005d6237df49182b2dadcc6a9c88eb371`
SHA256	`0774e8ba0d8f707573f0f50e927251d521eae19257de5431272095b6607f51b4`
CRC32	`81CBACC1`
ssdeep	`None`
Yara	suspicious_packer_section - The packer/protector section names/keywords keylogger - Run a keylogger win_registry - Affect system registries win_files_operation - Affect private profile
VirusTotal	Search for analysis

Name	12b880f39f06cad3_winzip 8.0 + serial.exe Download Submit file
Filepath	C:\Windows\Temp\Winzip 8.0 + serial.exe
Size	162.5KB
Processes	1020 (2ee1b31f269c9e78_xbox.info.exe)
Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`62c76ac82e66a3a699837de262b85d42`
SHA1	`95d965959a08a64242ee5325177ebe69ffc71e43`
SHA256	`12b880f39f06cad39aee7fc573e09afebbb0975a350e82a66a603f5b004eb462`
CRC32	`9141565D`
ssdeep	`None`
Yara	suspicious_packer_section - The packer/protector section names/keywords keylogger - Run a keylogger win_registry - Affect system registries win_files_operation - Affect private profile
VirusTotal	Search for analysis

Dropped Files