Overview
overview
7Static
static
77z.exe
windows7-x64
37z.exe
windows10-2004-x64
3Foolish.exe
windows7-x64
1Foolish.exe
windows10-2004-x64
1Foolish.exe
windows7-x64
1Foolish.exe
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Proxy/Boun...hy.dll
windows7-x64
1Proxy/Boun...hy.dll
windows10-2004-x64
1Proxy/DotNettyAll.dll
windows7-x64
1Proxy/DotNettyAll.dll
windows10-2004-x64
1Proxy/Fool...xy.exe
windows7-x64
1Proxy/Fool...xy.exe
windows10-2004-x64
1Proxy/Fool...xy.exe
windows7-x64
1Proxy/Fool...xy.exe
windows10-2004-x64
1Proxy/Goog...uf.dll
windows7-x64
1Proxy/Goog...uf.dll
windows10-2004-x64
1Proxy/ICSh...ib.dll
windows7-x64
1Proxy/ICSh...ib.dll
windows10-2004-x64
1Proxy/Micr...ns.dll
windows7-x64
1Proxy/Micr...ns.dll
windows10-2004-x64
1Proxy/Micr...on.dll
windows7-x64
1Proxy/Micr...on.dll
windows10-2004-x64
1Proxy/Micr...ns.dll
windows7-x64
1Proxy/Micr...ns.dll
windows10-2004-x64
1Proxy/Micr...ng.dll
windows7-x64
1Proxy/Micr...ng.dll
windows10-2004-x64
1Proxy/Micr...ns.dll
windows7-x64
1Proxy/Micr...ns.dll
windows10-2004-x64
1Proxy/Micr...es.dll
windows7-x64
1Proxy/Micr...es.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12-08-2024 12:19
Static task
static1
Behavioral task
behavioral1
Sample
7z.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7z.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Foolish.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Foolish.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Foolish.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Foolish.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Proxy/BouncyCastle.Cryptography.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Proxy/BouncyCastle.Cryptography.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Proxy/DotNettyAll.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Proxy/DotNettyAll.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Proxy/FoolishProxy.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Proxy/FoolishProxy.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Proxy/FoolishProxy.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Proxy/FoolishProxy.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Proxy/Google.Protobuf.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Proxy/Google.Protobuf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Proxy/ICSharpCode.SharpZipLib.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Proxy/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Proxy/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Proxy/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Proxy/Microsoft.Extensions.DependencyInjection.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Proxy/Microsoft.Extensions.DependencyInjection.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Proxy/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Proxy/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Proxy/Microsoft.Extensions.Logging.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Proxy/Microsoft.Extensions.Logging.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Proxy/Microsoft.Extensions.Options.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Proxy/Microsoft.Extensions.Options.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Proxy/Microsoft.Extensions.Primitives.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Proxy/Microsoft.Extensions.Primitives.dll
Resource
win10v2004-20240802-en
General
-
Target
Foolish.exe
-
Size
139KB
-
MD5
f100c747eef93b70fe521c6bc16b4ed5
-
SHA1
170038b3d7c86c3fc1d7ba4ea12dfb94cba2e411
-
SHA256
bc40d1b3b26dfacb870a693b90522b01754e1aa81a94543a25b9a662a82b6ec4
-
SHA512
55c293eb21521d4765e7d82fd8a35da28013451142d0e3bff116a6882ba7540383ac417606758b8d645c3ed7ecc8cf6b8c36f7b2684065f482d8ba86fe120b2d
-
SSDEEP
3072:rAi4pxpEHmAdx4/kyHRZa0YiRAl278IVn2JbS1cJw8lWW:rAi4pxpRkyHRZa0Gl278IVNcqcW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
Foolish.exepid process 2816 Foolish.exe