Overview
overview
8Static
static
1fish.zip
windows10-2004-x64
8fish.zip
windows11-ltsc_2024-x64
1markers.json
windows10-2004-x64
3markers.json
windows11-ltsc_2024-x64
3metaData.json
windows10-2004-x64
3metaData.json
windows11-ltsc_2024-x64
3mods.json
windows10-2004-x64
3mods.json
windows11-ltsc_2024-x64
3recording.tmcpr
windows10-2004-x64
3recording.tmcpr
windows11-ltsc_2024-x64
3recording.tmcpr.crc32
windows10-2004-x64
3recording.tmcpr.crc32
windows11-ltsc_2024-x64
3General
- Target fish.mcpr
- Size 9.7MB
- Sample260801-s2b73azblh
- SHA256 b6986ee713173eeb5dc4bf52f8e9f1839182471fec8c44500e9538a62c50cd3b
- MD5 388cd1c1839ae6620a01c3642972b4ad
- SHA1 b4338a79345550d3c2198961acc3fdf09e157ba6
- SHA512 0516c0dab908389b56c7ea910cdf81e72790b20faa53140fba277c5fe090e37d80758f03fd5db4d5f425477565bf6b6547183f574d545f01efd1d480130010c6
- SSDEEP 196608:ekklJL3t0lGKn8UkeidtmbXDZMKst7cB6a4Lzlcju1U5wLuY:fklteLnJkeamjaJL2u1kY
- TLSH T10BA6339B10BCE5F44C6DC72343D789B7A3DCB76281B1F12222BE50FCA48DA9541C896E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fish.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fish.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
markers.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
markers.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
metaData.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
metaData.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
mods.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mods.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
recording.tmcpr
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
recording.tmcpr
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
recording.tmcpr.crc32
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
recording.tmcpr.crc32
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fish.mcpr
- Size 9.7MB
- SHA256 b6986ee713173eeb5dc4bf52f8e9f1839182471fec8c44500e9538a62c50cd3b
- MD5 388cd1c1839ae6620a01c3642972b4ad
- SHA1 b4338a79345550d3c2198961acc3fdf09e157ba6
- SHA512 0516c0dab908389b56c7ea910cdf81e72790b20faa53140fba277c5fe090e37d80758f03fd5db4d5f425477565bf6b6547183f574d545f01efd1d480130010c6
- SSDEEP 196608:ekklJL3t0lGKn8UkeidtmbXDZMKst7cB6a4Lzlcju1U5wLuY:fklteLnJkeamjaJL2u1kY
- TLSH T10BA6339B10BCE5F44C6DC72343D789B7A3DCB76281B1F12222BE50FCA48DA9541C896E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target markers.json
- Size 123B
- SHA256 dbc435eddb6b7c9eb3a14e245868b599d9e23c70c95c07e2a2f2a9d97b757f0e
- MD5 18aa8e661cb1f156f1ea6561f25b62a2
- SHA1 ca28608e8aed8c0f929a7e85ee7f17e4db3347ae
- SHA512 4f19586630a308f3abe2fb40d4bc778cca71e4ebe9e91b11e8d8d5c719d3286edd33675e25885d9de35de1b7e7f9ee2f85bd564cccf997cf042e6a21064e54f8
- TLSH T1FDB092B865900327856392862FC21325783DA34D0C8122AB7605DE1EEE99C5A7203EB5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target metaData.json
- Size 23KB
- SHA256 ca10b54a8e4d1254252d8d33d0a6c81cb15480d96f82f221d999fa6910743382
- MD5 60fb8302d0968e739f6876c75f75e7c6
- SHA1 480c6da1e825a1005340bb7c1603e0667eab5e95
- SHA512 ced2e36530c8b55c827ca0f4c3212c3534b3bffad7d52c7fa03ac469dd187be4c4886ab00a92deee75059cc7f637c2b109b15a6f247071900ffb5ca6e068e4e0
- SSDEEP 384:xkad275sBoqX50wW3oM2tYwOC0EuO0zp+RERdUm83:F013ctYdO0d+Rmqz3
- TLSH T1CAB2293657E478A5E7DD86C1CA70FDA8189FF8A318D6F0CC28EDD3E91901795EA08D05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mods.json
- Size 105B
- SHA256 cb3161c33538c1666b79ea5a20b9c6a188a02e349e20e5bc23a1abe2665f2578
- MD5 89b383fe4e02dee08c6625146417815f
- SHA1 9e6d63d885197ae27831474097ce2cb36ff5c278
- SHA512 030ec0fe928f1a128e55d1e2ff055934bef70276f42cf1a37a10cc0eacb6e4e7e5ea1efaac30fc08ab067ead5ba14bb3f44ee75b9f068a0773c78cf37f6aac94
- TLSH T1EDB0129187BC07BD038007E84C3348328729CB003E70020A882A0984CE993E44703C39
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target recording.tmcpr
- Size 122.1MB
- SHA256 f9e20394caae200bae5e03e8877fb62b1fb753420db7cf8d49465cf7e9161018
- MD5 68d7ff2434ee5bde707987c60308fb5d
- SHA1 0052b17f7e54b57198660026e6f9523b25440d87
- SHA512 3412c86f82307bea1424991a25f5589accfacdb837f61d73a94024e3960bccb99d0aa4d3e3b51689f43951935fa6c876baacee4184c7150585b0aa66c804d413
- SSDEEP 98304:ayDV+ihJx8jNiWfuxon86drN5fnwDj6V0fKdVtsbcUQzT4Go7UnTmo6QDeJ2Hrj+:akd
- TLSH T168583724EF1F253FD02F9AFF6001D66B85059DB1D14AF2A4FAD23794C07C9AE4895B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target recording.tmcpr.crc32
- Size 10B
- SHA256 1c3ecc696ce0c09cfc4682fe014793bb7819d460bc52f3f042b3cddd957538a1
- MD5 07546036b81211731cc79dab6af3d872
- SHA1 4d15c906068d796f98d19cfb6d3b5e2450ac0a22
- SHA512 1a4a65ce75b484edcd77fcc10282bef91de22e335eac9a626b14f36135ec74a44072954092f59f5bb3548f479e25f5c285dc26bcd3749283cfb1eb503fb6a056
- MD5 SHA1 SHA512
Score3/10