Overview

overview

10

Static

static

3

d75697e57e...fd.exe

windows7-x64

10

d75697e57e...fd.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/Folks.exe

windows7-x64

$TEMP/Folks.exe

windows10-2004-x64

Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/03/2025, 09:01

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\$TEMP\Folks.exe command="C:\Users\Admin\AppData\Local\Temp\$TEMP\Folks.exe" wdir=C:\Users\Admin\AppData\Local\Temp\$TEMP Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    $TEMP/Folks.exe

  • Size

    149KB

  • MD5

    92a41d13c79ce8eb843e8c6df2af3558

  • SHA1

    5faaa98f537746b995042e2075d33ce7bdc4c7e0

  • SHA256

    76d8ed1310911122e1dbe3efd25541f93e3828fe95ebf37cdeede710944f291e

  • SHA512

    4623c951346f4049b79ffb43003b6ea1d09fcb542047c7b9ef55e212afbc093aea17e57b53cde723019c266e64bf7b3d40a2d89e8a80337ce709f6d9a7997254

  • SSDEEP

    3072:pPpU08BjlWTPJth26X7Sn4UfpLUNN9t68cCWlrss4M5iRqe:LQBk7JjX74cN0lrztg/

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads