Overview

overview

7

Static

static

7

7z.exe

windows7-x64

3

7z.exe

windows10-2004-x64

3

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Proxy/Boun...hy.dll

windows7-x64

1

Proxy/Boun...hy.dll

windows10-2004-x64

1

Proxy/DotNettyAll.dll

windows7-x64

1

Proxy/DotNettyAll.dll

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Goog...uf.dll

windows7-x64

1

Proxy/Goog...uf.dll

windows10-2004-x64

1

Proxy/ICSh...ib.dll

windows7-x64

1

Proxy/ICSh...ib.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...on.dll

windows7-x64

1

Proxy/Micr...on.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...ng.dll

windows7-x64

1

Proxy/Micr...ng.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...es.dll

windows7-x64

1

Proxy/Micr...es.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-08-2024 12:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Foolish.exe

  • Size

    139KB

  • MD5

    f100c747eef93b70fe521c6bc16b4ed5

  • SHA1

    170038b3d7c86c3fc1d7ba4ea12dfb94cba2e411

  • SHA256

    bc40d1b3b26dfacb870a693b90522b01754e1aa81a94543a25b9a662a82b6ec4

  • SHA512

    55c293eb21521d4765e7d82fd8a35da28013451142d0e3bff116a6882ba7540383ac417606758b8d645c3ed7ecc8cf6b8c36f7b2684065f482d8ba86fe120b2d

  • SSDEEP

    3072:rAi4pxpEHmAdx4/kyHRZa0YiRAl278IVn2JbS1cJw8lWW:rAi4pxpRkyHRZa0Gl278IVNcqcW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Foolish.exe
    "C:\Users\Admin\AppData\Local\Temp\Foolish.exe"
    1⤵
      PID:4564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4564-0-0x000002605CA80000-0x000002605CA81000-memory.dmp

      Filesize

      4KB

      Download