Overview
overview
7Static
static
3blockyfish...64.exe
windows10-2004-x64
7blockyfish...64.exe
windows11-21h2-x64
7$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1Blockyfish.exe
windows10-2004-x64
7d3dcompiler_47.dll
windows10-2004-x64
1dxcompiler.dll
windows10-2004-x64
1dxil.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows10-2004-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows10-2004-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...sh.exe
windows10-2004-x64
7$R0/Uninst...sh.exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 19:25
Static task
static1
Behavioral task
behavioral1
Sample
blockyfish-4.4.1-windows-x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
blockyfish-4.4.1-windows-x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Blockyfish.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral17
Sample
dxcompiler.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
dxil.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral19
Sample
ffmpeg.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
libEGL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral21
Sample
libGLESv2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
vk_swiftshader.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral23
Sample
vulkan-1.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260130-en
Behavioral task
behavioral30
Sample
$R0/Uninstall Blockyfish.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral31
Sample
$R0/Uninstall Blockyfish.exe
Resource
win11-20260130-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260130-en
General
- Target $PLUGINSDIR/app-64.7z
- Size 89.5MB
- Sample260503-x451daf141
- SHA256 fca32ef53c978dc4b6f31f7b760152855c27785fdf62a789a0d66b58333a2921
- MD5 89fb767a97d0b25490689d2287186520
- SHA1 48869509791b5f344cc10b53e6b341b0fb9c4dab
- SHA512 72580aa004c95c0cd2b19f7dd8100144013b7d1086e88c5a41cc7aaf6a6a1830829a0bbde2b572bdca0d6be8c8e9f36324eef13faa3bb0cd0449272f6ed09d70
- SSDEEP 1572864:GddRhjQn2MkTcttJciZBzHeb+o8KQSMU21v8kfGriwizXHgm2q9bpFoTPOzN:Gv3jthwcizebF8FSMU21ELriSpq9OOzN
- TLSH T1C928339D22233C47C964D37B89B6931EE8D07F1B6CCE196C6D1C4A978AFD102418A7B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2648 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2648 7zFM.exe Token: 35 2648 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2648 7zFM.exe