Overview
overview
3Static
static
3Axiom X.zip
windows10-2004-x64
1Axiom X.zip
windows11-ltsc_2024-x64
1D3DCompile...r3.dll
windows10-2004-x64
1FoulzExter...config
windows10-2004-x64
3FoulzExter...config
windows11-ltsc_2024-x64
3FoulzExternal.exe
windows10-2004-x64
1FoulzExternal.exe
windows11-ltsc_2024-x64
1FoulzExternal.pdb
windows10-2004-x64
3FoulzExternal.pdb
windows11-ltsc_2024-x64
3PenImc_cor3.dll
windows10-2004-x64
1PenImc_cor3.dll
windows11-ltsc_2024-x64
1Presentati...r3.dll
windows10-2004-x64
1Presentati...r3.dll
windows11-ltsc_2024-x64
1SDL2.dll
windows10-2004-x64
1SDL2.dll
windows11-ltsc_2024-x64
1cimgui.dll
windows10-2004-x64
1cimgui.dll
windows11-ltsc_2024-x64
1imgui.ini
windows10-2004-x64
1imgui.ini
windows11-ltsc_2024-x64
1vcruntime140_cor3.dll
windows10-2004-x64
1vcruntime140_cor3.dll
windows11-ltsc_2024-x64
1wpfgfx_cor3.dll
windows10-2004-x64
1wpfgfx_cor3.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/07/2026, 17:20
Static task
static1
Behavioral task
behavioral1
Sample
Axiom X.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Axiom X.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
D3DCompiler_47_cor3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
FoulzExternal.dll.config
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
FoulzExternal.dll.config
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
FoulzExternal.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
FoulzExternal.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
FoulzExternal.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
FoulzExternal.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
PenImc_cor3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PenImc_cor3.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral12
Sample
PresentationNative_cor3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
PresentationNative_cor3.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
SDL2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
SDL2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
cimgui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
cimgui.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
imgui.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
imgui.ini
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
vcruntime140_cor3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
vcruntime140_cor3.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
wpfgfx_cor3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
wpfgfx_cor3.dll
Resource
win11ltsc2024-20260709-en
General
- Target FoulzExternal.dll.config
- Size 184B
- Sample260710-vwer4sdt7q
- SHA256 5fe1ad802f68d7c47dbbd8e60162ba88abaed162da5d381c85d3e4935311962e
- MD5 cc46a0995713ba7cb577b4bbbedf83e8
- SHA1 6cc50a0e444e33f65d42423195ed045a3a55daf8
- SHA512 36f5b3acbc520504cfe56e5fe19de2a22ae3d2ddddb4c0eb3e441f884033077fb411e69976c3e250c3ef01189d0e48016bde67a73a0dbc950dd5d8ec7783fd2a
- TLSH T1EFC08C8980A4FE3B4E120B136760813ACFF072A3B528100CF42FEAA40F2124D4307376
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3372 OpenWith.exe