Analysis
- user interaction
yes - max time kernel
119s - max time network
119s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/07/2026, 10:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fishhack v4.2 (update 4.4.0)_[unknowncheats.me]_.zip
Resource
win11-20260513-en
0 signatures
120 seconds
Behavioral task
behavioral2
Sample
FishHAXZ v4.2.exe
Resource
win11-20260513-en
2 signatures
120 seconds
Behavioral task
behavioral3
Sample
README.txt
Resource
win11-20260513-en
5 signatures
120 seconds
Behavioral task
behavioral4
Sample
injection.bin
Resource
win11-20260513-en
4 signatures
120 seconds
Behavioral task
behavioral5
Sample
keys.cfg
Resource
win11-20260513-en
4 signatures
120 seconds
General
- Target FishHAXZ v4.2.exe
- Size 199KB
- Sample260728-m3vsxavyhs
- SHA256 20ea5b5b8b84af788bf9d306b804128fcd8fa11fd99043c3115619fe0c89c167
- MD5 c1ce9ad6278ef7dcd7f30608c6729440
- SHA1 c7a8628c712297f2e1cceedd70df31fc9acbbf6e
- SHA512 d9090ea24cbf7ec43535b341eb2080df5be74fe7dace187ba08e6cf343153bbfd3f985a1c0ecab1be8928e271ff16b23a107e5ab22f058ce5f5f09ac9fe3211b
- SSDEEP 3072:pUJyEN9DHdRd8OQfF5jwTjhJsWJQq81BLEzzuE:pUBvDH+vtJcjSq
- TLSH T1D3142859B6A540F9D477C135C892171EE772782207238BAF03A15E2F9F236E0AD3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4864 cmd.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1480 wrote to memory of 4864 1480 FishHAXZ v4.2.exe 82