Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FishyColor.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
FishyColor.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
FishyColor.exe
-
Size
22.9MB
-
MD5
b18e5af11989bba7b7c19cf10441685a
-
SHA1
3bba74d8d1e33e553f57a43d0d5fc2c6f5d8dbbb
-
SHA256
ca7c7c9e18f00076f346908f15b1d43041a10ff86ec1169c2f7a0458f0a40945
-
SHA512
6c632b91ed29bb97d7576ec24bf959a7e24085ff2ea2197bcda6677281155b96368327a3ba17eeb0ba29e2a18800518ab4ba8a070d69695651f3561c82a754d5
-
SSDEEP
393216:H5LoU6TOMAILuCCUIoWpI1K1uojnakRVCAFweg8peKBkl/SwPNYZpDqIe/st3qq8:H5L6OMAUcroWpQK1ucnakRVlWegWS6wB
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1472 FishyColor.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1472 FishyColor.exe