Overview

overview

10

Static

static

FishLocker.bin.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FishLocker.bin.zip

  • Size

    108KB

  • Sample

    210620-ncw3k9ytz2

  • MD5

    54df234a9efd8ed4a015b4387fcf2ce2

  • SHA1

    f912b9ca44abc9ebbd91fc41bb2dad491e0c4e47

  • SHA256

    4e7b6aad7dbf0d6064d008570202135e602610b7e4c7d61d53ab7df83335c21c

  • SHA512

    d666e4589310f122a5ea6cc2d7cea0a17ef1791472ec5cfd0a8e5761364c8fd663322b7a46c93851ed5f9f06b19fc92d26245a7bf94a7c9e015ba8f54f882d34

Score
10/10
discoveryevasionexploitpersistence

Malware Config

Targets

    • Target

      FishLocker.bin

    • Size

      218KB

    • MD5

      85d90010fed526eef947c440629b82dd

    • SHA1

      1df270d02c9ea53f180130e7a219b40146cfca10

    • SHA256

      117b0078905f0929a5da0b24e20c76bbaa99151f56789c63b4498143c2261926

    • SHA512

      1455958c884f15e03531b1e836269fc6b2bab60e1a4b360e1206568ca7aabee0f55599eab4d11889359818c859d8d37d725bd90109165ca7626d045a81e75be7

    Score
    10/10
    discoveryevasionexploitpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

File Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks