Overview

overview

7

Static

static

7

7z.exe

windows7-x64

3

7z.exe

windows10-2004-x64

3

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Foolish.exe

windows7-x64

1

Foolish.exe

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Proxy/Boun...hy.dll

windows7-x64

1

Proxy/Boun...hy.dll

windows10-2004-x64

1

Proxy/DotNettyAll.dll

windows7-x64

1

Proxy/DotNettyAll.dll

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Fool...xy.exe

windows7-x64

1

Proxy/Fool...xy.exe

windows10-2004-x64

1

Proxy/Goog...uf.dll

windows7-x64

1

Proxy/Goog...uf.dll

windows10-2004-x64

1

Proxy/ICSh...ib.dll

windows7-x64

1

Proxy/ICSh...ib.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...on.dll

windows7-x64

1

Proxy/Micr...on.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...ng.dll

windows7-x64

1

Proxy/Micr...ng.dll

windows10-2004-x64

1

Proxy/Micr...ns.dll

windows7-x64

1

Proxy/Micr...ns.dll

windows10-2004-x64

1

Proxy/Micr...es.dll

windows7-x64

1

Proxy/Micr...es.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12-08-2024 12:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Proxy/BouncyCastle.Cryptography.dll

  • Size

    6.7MB

  • MD5

    cc6288f17e55ca037d75b4fccc51f889

  • SHA1

    3be1a72156992196ff7b623f458b02c34803f3ea

  • SHA256

    82153c0e68834a0f40e20038425429a3e3f9cf4dabbc9191b476cfe5618a141d

  • SHA512

    da583281e1397b46eeaf7c0c961f8e38468351a1e011387730f68f2acd9098c01e52ad1b7805425e9d8d26a5c7319dc52c034d1e56f9cdb4a96b14bdc91a478b

  • SSDEEP

    98304:PWabnH8E4ByIbDSF9bTjno+adQ6Z5EgveHluvNoT4S9tomfTYFNUWZ:VHwBWbQrdQ8rvsluv67amrYn/Z

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Proxy\BouncyCastle.Cryptography.dll,#1
    1⤵
      PID:2988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads