General
- Target Axiom X.zip
- Size 69.8MB
- Sample260710-wlx2dad17j
- SHA256 ebeb6244c7612950dca990ea2e913c1976f370848d77f1e67b5f39a74915e4d8
- MD5 fd348ee1c9bd66a908808006ebb11671
- SHA1 d34fc81f96dceafc73401905439d6b4bffda9cab
- SHA512 6839febf81c5d1df1b4707ce92284639521720e25867e99ebfafd6d5aa52727264768884ccccd53d0674b653d3bdcec07eba04e330a8e7a5d5bd0b91c3968a36
- SSDEEP 1572864:PcBW6+NFKfyDy9kP6lOHsZdK+wiPAx/cycOuil4PYIg4QR5:tnNofyEkSlO0oitycFilS9y5
- TLSH T18CF733C4F8EA9E7FC1FA815AB8B93C5C24E096BAAD93780D8020E4D745ED345973059F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FoulzExternal.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
FoulzExternal.exe
Resource
win11ltsc2024-20260709-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target FoulzExternal.exe
- Size 163.5MB
- SHA256 5496999f3d315143d96c96d00ba0a46afad9ce734d799ce359f3cfc6d6a7fe6d
- MD5 18617c2cc9dd799d60a65dcb33b08c31
- SHA1 1f6870ecf465712986403b3f48b0a5c213555dbc
- SHA512 345089024fcf7f1a255ba4b18b60c47a74646e075fd6e4e158d0c321af79846ba3e3ed1763aa602e868138246ae82cc19828f74cff190a7c4cc486cede48c0e6
- SSDEEP 786432:B230A8Oa89TsG5YWV5OtsFGtatWbhsCrTG5mfOm5cuA0zm7/RIS+vF:ckA838JsHWEd2CvG8fOkZiM
- TLSH T119888C01A3E85A05E67B867897738161E6B1FC535711C2CF0094FA5A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger