816e1ec14fc61f8e87196a68174f4a6c69696ce41f3c9b156c2864c862551348 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

7z.exe

windows7-x64

3

7z.exe

windows10-2004-x64

3

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Proxy/Boun...hy.dll

windows7-x64

1

Proxy/Boun...hy.dll

windows10-2004-x64

1

Proxy/DotNettyAll.dll

windows7-x64

1

Proxy/DotNettyAll.dll

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Goog...uf.dll

windows7-x64

1

Proxy/Goog...uf.dll

windows10-2004-x64

1

Proxy/ICSh...ib.dll

windows7-x64

1

Proxy/ICSh...ib.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...on.dll

windows7-x64

1

Proxy/Micr...on.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...ng.dll

windows7-x64

1

Proxy/Micr...ng.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...es.dll

windows7-x64

1

Proxy/Micr...es.dll

windows10-2004-x64

1

Analysis

max time kernel
125s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2024 12:19

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7z.exe

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

7z.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Foolish.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Foolish.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Foolish.exe

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Foolish.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Newtonsoft.Json.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Newtonsoft.Json.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Proxy/BouncyCastle.Cryptography.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Proxy/BouncyCastle.Cryptography.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Proxy/DotNettyAll.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Proxy/DotNettyAll.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Proxy/FoolishProxy.exe

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Proxy/FoolishProxy.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Proxy/FoolishProxy.exe

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Proxy/FoolishProxy.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Proxy/Google.Protobuf.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Proxy/Google.Protobuf.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Proxy/ICSharpCode.SharpZipLib.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Proxy/ICSharpCode.SharpZipLib.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Proxy/Microsoft.Extensions.DependencyInjection.Abstractions.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Proxy/Microsoft.Extensions.DependencyInjection.Abstractions.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Proxy/Microsoft.Extensions.DependencyInjection.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Proxy/Microsoft.Extensions.DependencyInjection.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Proxy/Microsoft.Extensions.Logging.Abstractions.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Proxy/Microsoft.Extensions.Logging.Abstractions.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Proxy/Microsoft.Extensions.Logging.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Proxy/Microsoft.Extensions.Logging.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Proxy/Microsoft.Extensions.Options.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Proxy/Microsoft.Extensions.Options.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Proxy/Microsoft.Extensions.Primitives.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Proxy/Microsoft.Extensions.Primitives.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Proxy/Google.Protobuf.dll
Size

354KB
MD5

615383c38e3cf0fa6a3b088eb194b8c8
SHA1

70da11dde6ca9ff5b0cfcc2707869255630bd4cc
SHA256

c477770e91001f3ae4566345cd41d5a214f733049732e420d051bdd40fb186ee
SHA512

1245455ad5706da621e1cad55eb502db92ecef6436f1f7b17669ab99c09b0cc22e377eab68b0e8ea1f3960561ddfa412ca7aa524e5d0de75e22ba1aad89d07af
SSDEEP

6144:tI120bK4gORpRQzOIFyl5yu+hNXrSS39WQ:a12PSFF63rl39WQ

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Proxy\Google.Protobuf.dll,#1
1⤵
PID:3332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy