Overview
overview
7Static
static
1Fishing-Ma...end.py
windows10-2004-x64
3Fishing-Ma...end.py
windows11-ltsc_2024-x64
3Fishing-Ma...nux.py
ubuntu-18.04-amd64
3Fishing-Ma...nux.py
debian-9-armhf
3Fishing-Ma...nux.py
debian-9-mips
3Fishing-Ma...nux.py
debian-9-mipsel
3Fishing-Ma...nux.py
windows10-2004-x64
3Fishing-Ma...nux.py
windows11-ltsc_2024-x64
3Fishing-Ma...nux.py
windows10-2004-x64
3Fishing-Ma...nux.py
windows11-ltsc_2024-x64
3Fishing-Ma...dev.sh
ubuntu-18.04-amd64
6Fishing-Ma...dev.sh
debian-9-armhf
7Fishing-Ma...dev.sh
debian-9-mips
6Fishing-Ma...dev.sh
debian-9-mipsel
6Fishing-Ma...nux.py
ubuntu-18.04-amd64
3Fishing-Ma...nux.py
debian-9-armhf
3Fishing-Ma...nux.py
debian-9-mips
3Fishing-Ma...nux.py
debian-9-mipsel
3Fishing-Ma...rap.py
windows10-2004-x64
3Fishing-Ma...rap.py
windows11-ltsc_2024-x64
3Fishing-Ma...ure.py
windows10-2004-x64
3Fishing-Ma...ure.py
windows11-ltsc_2024-x64
3Fishing-Ma...fig.py
windows10-2004-x64
3Fishing-Ma...fig.py
windows11-ltsc_2024-x64
3Fishing-Ma...ler.py
windows10-2004-x64
3Fishing-Ma...ler.py
windows11-ltsc_2024-x64
3Fishing-Ma...bug.py
windows10-2004-x64
3Fishing-Ma...bug.py
windows11-ltsc_2024-x64
3Fishing-Ma...ine.py
windows10-2004-x64
3Fishing-Ma...ine.py
windows11-ltsc_2024-x64
3Fishing-Ma...uts.py
windows10-2004-x64
3Fishing-Ma...uts.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
1s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
31/08/2026, 19:23
Static task
static1
Behavioral task
behavioral1
Sample
Fishing-Macro-master/LINUX/_backend.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Fishing-Macro-master/LINUX/_backend.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Fishing-Macro-master/LINUX/easy_run_linux.py
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
Fishing-Macro-master/LINUX/easy_run_linux.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral5
Sample
Fishing-Macro-master/LINUX/easy_run_linux.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral6
Sample
Fishing-Macro-master/LINUX/easy_run_linux.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral7
Sample
Fishing-Macro-master/LINUX/find_window_linux.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Fishing-Macro-master/LINUX/find_window_linux.py
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Fishing-Macro-master/LINUX/inputs_linux.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Fishing-Macro-master/LINUX/inputs_linux.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Fishing-Macro-master/LINUX/install-udev.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral12
Sample
Fishing-Macro-master/LINUX/install-udev.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral13
Sample
Fishing-Macro-master/LINUX/install-udev.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral14
Sample
Fishing-Macro-master/LINUX/install-udev.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral15
Sample
Fishing-Macro-master/LINUX/run_linux.py
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral16
Sample
Fishing-Macro-master/LINUX/run_linux.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral17
Sample
Fishing-Macro-master/LINUX/run_linux.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral18
Sample
Fishing-Macro-master/LINUX/run_linux.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral19
Sample
Fishing-Macro-master/WINDOWS/_bootstrap.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Fishing-Macro-master/WINDOWS/_bootstrap.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Fishing-Macro-master/WINDOWS/bloxfish/capture.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Fishing-Macro-master/WINDOWS/bloxfish/capture.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Fishing-Macro-master/WINDOWS/bloxfish/config.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Fishing-Macro-master/WINDOWS/bloxfish/config.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Fishing-Macro-master/WINDOWS/bloxfish/controller.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Fishing-Macro-master/WINDOWS/bloxfish/controller.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Fishing-Macro-master/WINDOWS/bloxfish/debug.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Fishing-Macro-master/WINDOWS/bloxfish/debug.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Fishing-Macro-master/WINDOWS/bloxfish/engine.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Fishing-Macro-master/WINDOWS/bloxfish/engine.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Fishing-Macro-master/WINDOWS/bloxfish/inputs.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Fishing-Macro-master/WINDOWS/bloxfish/inputs.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target Fishing-Macro-master/LINUX/install-udev.sh
- Size 998B
- Sample260831-x39beayemb
- SHA256 9e44eec215650ffc487df5319565492f03517129e91c16cb0576d369a041bf37
- MD5 fa957fc3ccc1cb98e44a54fb3412d685
- SHA1 365e484ff0e0db9e5f6e80d475d96197a89cdc91
- SHA512 0b72b4b69c11690ccda492d45a14ac5765f203ba4f4be4f2b1e29434308be18db904cb76c20833cf529ffa01103810dee660742e72f10b979d924d1fc0fd1ca6
- TLSH T128116541732053735AE0A2B2FFCE8154BFA9217B82504A30309D1031F1120B67379CDA
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Reads network interface configuration 2 TTPs 2 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/devices/virtual/net/lo/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:13.0/net/enp0s19/uevent udevadm - Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/cpu0/uevent udevadm - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata2/host1/target1:0:0/1:0:0:0/block/sda/sda1/uevent udevadm File opened for reading /sys/devices/system/clockevents/clockevent0/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-1/2-1:1.0/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-2/2-2:1.0/uevent udevadm File opened for reading /sys/class/devcoredump udevadm File opened for reading /sys/devices/pci0000:00/0000:00:12.0/graphics/fb0/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty58/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty12/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty28/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-1/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty20/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-2/2-2:1.0/0003:0222:0001.0002/input/input1/input1::scrolllock/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty11/uevent udevadm File opened for reading /sys/devices/platform/serial8250/uevent udevadm File opened for reading /sys/devices/virtual/mem/random/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty5/uevent udevadm File opened for reading /sys/devices/virtual/vc/vcs2/uevent udevadm File opened for reading /sys/devices/virtual/misc/autofs/uevent udevadm File opened for reading /sys/devices/virtual/bdi/8:0/uevent udevadm File opened for reading /sys/class/ata_port udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-1/2-1:1.0/0003:0222:0001.0001/input/input0/js0/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata1/ata_port/ata1/uevent udevadm File opened for reading /sys/class/ata_device udevadm File opened for reading /sys/devices/virtual/misc/psaux/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty27/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata2/host1/uevent udevadm File opened for reading /sys/devices/system/clocksource/clocksource0/uevent udevadm File opened for reading /sys/devices/virtual/mem/urandom/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty56/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty42/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty53/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty3/uevent udevadm File opened for reading /sys/devices/virtual/input/mice/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-1/2-1:1.0/0003:0222:0001.0001/input/input0/mouse0/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty1/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata2/host1/target1:0:1/1:0:1:0/scsi_device/1:0:1:0/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.2/uevent udevadm File opened for reading /sys/devices/virtual/graphics/fbcon/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-2/2-2:1.0/0003:0222:0001.0002/hidraw/hidraw1/uevent udevadm File opened for reading /sys/class/ata_link udevadm File opened for reading /sys/devices/virtual/tty/tty29/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty19/uevent udevadm File opened for reading /sys/devices/platform/serial8250/tty/ttyS3/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty31/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata1/host0/uevent udevadm File opened for reading /sys/class/phy udevadm File opened for reading /sys/devices/virtual/vc/vcsa2/uevent udevadm File opened for reading /sys/devices/virtual/vc/vcs3/uevent udevadm File opened for reading /sys/class/graphics udevadm File opened for reading /sys/devices/virtual/misc/network_throughput/uevent udevadm File opened for reading /sys/class/devfreq udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata1/link1/ata_link/link1/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty36/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:14.0/usb2/2-2/2-2:1.0/0003:0222:0001.0002/input/input1/input1::capslock/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.2/usb1/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata2/link2/dev2.0/ata_device/dev2.0/uevent udevadm File opened for reading /sys/devices/virtual/tty/tty32/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.3/i2c-0/uevent udevadm File opened for reading /sys/devices/software/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/uevent udevadm File opened for reading /sys/devices/pci0000:00/0000:00:0a.1/ata1/link1/dev1.1/ata_device/dev1.1/uevent udevadm File opened for reading /sys/devices/virtual/vtconsole/vtcon0/uevent udevadm File opened for reading /sys/devices/virtual/vc/vcsa4/uevent udevadm File opened for reading /sys/bus/platform/devices udevadm -
description ioc Process File opened for reading /proc/cmdline udevadm File opened for reading /proc/filesystems install File opened for reading /proc/1/environ udevadm File opened for reading /proc/cmdline udevadm File opened for reading /proc/1/environ udevadm File opened for reading /proc/filesystems id File opened for reading /proc/cmdline modprobe File opened for reading /proc/filesystems udevadm File opened for reading /proc/self/stat udevadm File opened for reading /proc/filesystems udevadm File opened for reading /proc/self/stat udevadm
Processes
-
/tmp/Fishing-Macro-master/LINUX/install-udev.sh/tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/usr/local/sbin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/usr/local/bin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/usr/sbin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/usr/bin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/sbin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/bin/bashbash /tmp/Fishing-Macro-master/LINUX/install-udev.sh1⤵PID:731
-
/usr/bin/idid -u2⤵
- Reads runtime system information
PID:736
-
-
/usr/bin/dirnamedirname /tmp/Fishing-Macro-master/LINUX/install-udev.sh2⤵PID:745
-
-
/usr/bin/installinstall -m 0644 /tmp/Fishing-Macro-master/LINUX/99-uinput.rules /etc/udev/rules.d/99-uinput.rules2⤵
- Reads runtime system information
PID:747
-
-
/sbin/modprobemodprobe uinput2⤵
- Reads runtime system information
PID:749
-
-
/sbin/udevadmudevadm control --reload-rules2⤵
- Reads runtime system information
PID:750
-
-
/sbin/udevadmudevadm trigger2⤵
- Reads network interface configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:751
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /etc/modules-load.d/uinput.conf
- Size 7B
- SHA256 a771c9695d7283f7771adc00b680bd27391e6ac00e9fd026f4796067ee9a87eb
- MD5 895c8735878bc1611cf6e1ee71f60ee6
- SHA1 988e5f17722d7b062c34d392bd886b49dfa92295
- SHA512 a9b069ed121ffeee887e0583d8cb46035ecf1fa90a26a4ecb3aa11ff03178b2b08621f6676db6b2350f290694c04aabcf36f2ce3e0813a76dde9a33555edb112
- MD5 SHA1 SHA512
- Path /etc/udev/rules.d/99-uinput.rules
- Size 281B
- SHA256 32d688b74025e7180c79348a33ff0d9f753e1f2cd596e708cd51e6f807d4a948
- MD5 b74edbd8f76aa5fdf250a826612ac58b
- SHA1 c956d2143c1e04ace71b25f21a90bb1d56d1bcc3
- SHA512 5035cac092b780ee8d995d8a3914c4ca737e2d4145d06faad457fbb8c9302a1a13479e65ddc0b3b2ae670e7d177f3e44444b064240db918c28a027e6fe262371
- TLSH T157D0EB118064EA33FEC2976B8BC80C73BA0102B88C05E2D2659CFC89285C171733ECC1
- MD5 SHA1 SHA512 TLSH