20ea5b5b8b84af788bf9d306b804128fcd8fa11fd99043c3115619fe0c89c167 | Triage

Analysis

max time kernel
147s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
05-09-2024 02:45

Sharing

Report Analysis Logs

General

Target

FishHAXZ v4.2.exe
Size

199KB
MD5

c1ce9ad6278ef7dcd7f30608c6729440
SHA1

c7a8628c712297f2e1cceedd70df31fc9acbbf6e
SHA256

20ea5b5b8b84af788bf9d306b804128fcd8fa11fd99043c3115619fe0c89c167
SHA512

d9090ea24cbf7ec43535b341eb2080df5be74fe7dace187ba08e6cf343153bbfd3f985a1c0ecab1be8928e271ff16b23a107e5ab22f058ce5f5f09ac9fe3211b
SSDEEP

3072:pUJyEN9DHdRd8OQfF5jwTjhJsWJQq81BLEzzuE:pUBvDH+vtJcjSq

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 792 wrote to memory of 1756	792	FishHAXZ v4.2.exe	79
PID 792 wrote to memory of 1756	792	FishHAXZ v4.2.exe	79

C:\Users\Admin\AppData\Local\Temp\FishHAXZ v4.2.exe
"C:\Users\Admin\AppData\Local\Temp\FishHAXZ v4.2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:792
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c CLS
  2⤵
  PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads