Overview

overview

7

Static

static

7

7z.exe

windows7-x64

3

7z.exe

windows10-2004-x64

3

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Proxy/Boun...hy.dll

windows7-x64

1

Proxy/Boun...hy.dll

windows10-2004-x64

1

Proxy/DotNettyAll.dll

windows7-x64

1

Proxy/DotNettyAll.dll

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Goog...uf.dll

windows7-x64

1

Proxy/Goog...uf.dll

windows10-2004-x64

1

Proxy/ICSh...ib.dll

windows7-x64

1

Proxy/ICSh...ib.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...on.dll

windows7-x64

1

Proxy/Micr...on.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...ng.dll

windows7-x64

1

Proxy/Micr...ng.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...es.dll

windows7-x64

1

Proxy/Micr...es.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-08-2024 12:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Foolish.exe

  • Size

    538KB

  • MD5

    8cb5244e37c9854bdd1bfef79f6aeeec

  • SHA1

    0d223402ab60f3c47da356e1af6d59314e12c1fc

  • SHA256

    1591e9766840d92d36d60f10f9566217187e13ec7ce247649ffea9b64075ef59

  • SHA512

    93011abd5c24732fd44514861dc229020f04999637c17f0e689f3abb8a8d9b5b0fcbf7ad33e17c926848ea554df6b08ccfa3aba4704dab79e172d529620b67c9

  • SSDEEP

    12288:88lx4pFlccoadzXJFYPlbDtgpM7h4Ig5c/5FiGGkNN9:2peSJkJm25gG/5FiGGK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Foolish.exe
    "C:\Users\Admin\AppData\Local\Temp\Foolish.exe"
    1⤵
      PID:4168

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads