4a171c6610855729bfda765c25952129d7bcf9669415348696626c907e4810c5

Sharing

Copy URL Twitter E-mail

General

Target
HowToFishSaveEditor 0.1.0 Beta.1 115 0.1.0-beta.3 2026-09-02T12-16Z 2K1uWS1pJ.zip
Size 9.7MB
Sample261017-nnry5sef64
SHA256 4a171c6610855729bfda765c25952129d7bcf9669415348696626c907e4810c5
MD5 8b42a7420d6f927605c86f3663e29d07
SHA1 404d3a52cee2c0480bbcc65b4a5f4f340ead2a82
SHA512 e25f199f7a6a8de7634301492969a58a74562d8ebf5dbc7b487b736a7c641674ca524ed3b1df1130ef951c2e3b4d5dfac164f4a9f3b2a8bde7c35a344ffcc64e
SSDEEP 196608:w5gHdo4Wo/vj5ehUTsdvcboDuIeXpNnHz2VvwWSROWocUcQY/Oy:egHdp9T5MUycauI2jnHcZSsW2cn
TLSH
T1E6A633B4A0E30503F15BB3BE1FB1A64C31E12D5AFE91967C54DE2B9701C70F98612AB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery pyinstaller

Malware Config

Targets

- Target
  HowToFishSaveEditor\HowToFishSaveEditor.exe
- Size 2.2MB
- SHA256 67c55f94bd7c60d056b06f9d7c60642b1dc355bc6f3401224828ac67cf27cf5c
- MD5 fa884d8fbd1d8786fcb5413b9b5c20d5
- SHA1 82ed2e8ae95f0e3a69ebec933a736a5574aeadf8
- SHA512 a8673ce07c5f7eb082b72caef8db16cf55869b84531ca9ff0b77554fc1b7604a0377f5c6326af8bfbcf0ec12a7ab980d830a10d6ea698faa6016f5af27d9f534
- SSDEEP 49152:HqD1qY8hGYbKvWk+XmNdEdv9ODP25j2q0geKDp2rmgeE858cC2IwlY7GF:Q8hGYO00Edv9ODu9ZLV2rmuY8UIj
- TLSH
  T183B52268B38510FAF8B3523D8D62C516E7B1BC124B21C2DB03E45B6A3F276E14939B75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  HowToFishSaveEditor\_internal\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH
  T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  HowToFishSaveEditor\_internal\VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH
  T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  HowToFishSaveEditor\_internal\_bz2.pyd
- Size 85KB
- SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
- MD5 207d4a4b7a113ef494514918f2dccdf3
- SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
- SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
- SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
- TLSH
  T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  HowToFishSaveEditor\_internal\_ctypes.pyd
- Size 139KB
- SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
- MD5 eeabc0c7756ed7a29e33e467c398737f
- SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
- SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
- SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
- TLSH
  T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  HowToFishSaveEditor\_internal\_decimal.pyd
- Size 283KB
- SHA256 8d41a84db20a9b985e98c802ad6833cf9625c744ad35478dd346f54f81488706
- MD5 4bebc4da7d6319283a8c664bfc55408e
- SHA1 4dc69a8105272711673afa5f712af982a18532e1
- SHA512 411cd0ee4189654e836579efb4df509a02cba39cd9793e6d7250aa4e239449dafb6936ac57cb8ee7bd97cf2fb178beea17f658bf6ae7149ed8ed927a7c47bdf3
- SSDEEP 6144:ASM9SUWXvOOiSx1u8llV6zeGqqM43fIWeA9O8O8OOT6MPgz/:ASM9SUWfQSx1ucapLIz/
- TLSH
  T1D5547C52A3490CA4EF7384388A479A57F7B2B8414360D78F47A48A972F933E3677E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  HowToFishSaveEditor\_internal\_hashlib.pyd
- Size 67KB
- SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
- MD5 dcf15b3e1858d9324be2c719e4e990c9
- SHA1 8311c2fb0bb75342367a83fcca7161a0f7fadafb
- SHA512 fa2783d0cbbba477a08bf4f2fa3df21d6d0bf5bd5bc7cef25254a3d29fc7d01229337ad5dd54c2f0e67b956fd43953aa98586240102511ddd48d04c674b7ff93
- SSDEEP 1536:KXwAzOYBQca7JKs2+C5oIGDIUy1Ni97BfIkxd8:0J/yJKs2+IoIGDIm6o8
- TLSH
  T1EF635B8AA6984092DA2382B5C9E34F43F974F252271197DF6678C18E2F233C3573B756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  HowToFishSaveEditor\_internal\_lzma.pyd
- Size 157KB
- SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
- MD5 cada2b240b280f172aeb32a1666b21e6
- SHA1 c15dc39329444433c255309eb89bae188aae1b22
- SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
- SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
- TLSH
  T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  HowToFishSaveEditor\_internal\_ssl.pyd
- Size 186KB
- SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
- MD5 e4ba5a52f5fa2a64baec46486cbdcf82
- SHA1 ff213b504a70d50871eb8432cea1b22563364cb4
- SHA512 111c926a0157d46c48a26da30face546b065eb4afddb6dcf27442fd4f73432808de43978f78f5b297b22a63d82d0d5bf305701e137f6060f59cbd601012e61fa
- SSDEEP 3072:FVpZeIk2MZ7IifVvQto7qrvYLrgp8VuMG4eJ9i1zktdsQ/3Omca45gMqTVBOrQII:Bxk2MZZVvQtmL4457qTVMrQ
- TLSH
  T1AD147B47B5446EF7D802E8BAC6234543FBB4F045331297DE48D6EA520F03746AE6AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  HowToFishSaveEditor\_internal\_uuid.pyd
- Size 27KB
- SHA256 a09308efd309732e3745e70b4456235579c450cac32bed616dfb3913b56f6637
- MD5 cc5b77a3dd4cc06a0b9c760a0b0c5c15
- SHA1 d88f44420c5819b631b3e332dc4903eb620cf216
- SHA512 2dc3d66a8f5b75e194e5511a868d6b110083958c3b0a77e9ac301277c550806295f450cb077119d7b00b129793af39a8b348650fcf50af54d153462b9f570903
- SSDEEP 768:it15cQIGIwFy1KPuBL2Ip4NTxf1mlRaXVCEI:it15cQIGIwFy1Ni9nfIYVo
- TLSH
  T147D26C8A9A748043FE638770D1F6DE83B939BBD3591157AB316991860E133C1E31B3AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  HowToFishSaveEditor\_internal\_wmi.pyd
- Size 39KB
- SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
- MD5 99a20947be014e8b4297765f03ed14b7
- SHA1 01327b7b1456ecb3d75ce41e403ad870f4391663
- SHA512 2841071945712547e13b82f2d7b4d72d25be77f239367dee92f31361478f81eb674e91835f679a266c5ad7b8a63118a3412302dc3fd9cfbd487442c6229fb159
- SSDEEP 768:N2/EEqrVmjsOujOQMVQIG3iCFy1KPuBL2Ip4FTxf1ml6Z+7UlFg5yK:IE9BE+jOQMVQIG3iCFy1Ni9/fILKq1
- TLSH
  T143037D8AE6684092EA6BC574C4A5CE53F675F7D36712838F326482990F333D1E73A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  HowToFishSaveEditor\_internal\_zstd.pyd
- Size 491KB
- SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
- MD5 035b0a033dd00dbe887556f4d4b852c3
- SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
- SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
- SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
- TLSH
  T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-console-l1-1-0.dll
- Size 22KB
- SHA256 56a3c8ec50eedef1f5024696ef928cb2a0f5d8b40c8a122cba412944dae81c46
- MD5 58d47110a15413dd2ac282072cf7ebc2
- SHA1 57e62abb007a94c7c25c5a23909c08b6c9336be8
- SHA512 5200318833751c7f6c3f86e29744721d882ca833f8e02d18aa18a45d97c8fa9216f0b19c75538444b5eebb8442305c5ecfa150dfb8e59589bccb1ce8ccf7f95c
- SSDEEP 192:JmOpW4hWoca8LxydkeR+G4GMsc+6UQ/X01k9z3AhEss//+EG:JmmW4hWocaGAv4rj/R9zlsc2EG
- TLSH
  T1F4A22A838EB89582FD9AAEB05694E5433C3DABC3188094113594F65D18E37C6EB1873D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-datetime-l1-1-0.dll
- Size 22KB
- SHA256 e91b155e01b98aa4466b94da39e04c379f2fd392c154e7b6d80c05e0476f0552
- MD5 fcfb48ea4e06f629e0bf4ffb1feb6f96
- SHA1 cd4b7756822c65f60fca3f1546a96a5aa928becc
- SHA512 83733b4a0f0dcd3651d70b7cca6865e12540a69a75fdbf13cd870f7da650846c1c217ab0b3d1c46c2df40c2a101da975635ef4c38a1ee3279fced98448815911
- SSDEEP 192:HW4hWVPca8Lxyf7LRroihrSHGcniRp4Kulc/9X01k9z3AmoiXPCWZa:HW4hWVPcaGAf7pofHBiR6KuO9R9zdoiE
- TLSH
  T18BA26BC28B7CA003EE9B6E70A195DE933C3C57DB1D40E25A05E5F1581CA37C9EA2872D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-debug-l1-1-0.dll
- Size 22KB
- SHA256 2117e4953f5ec36adff21a416db5ff5f9ff27ea5f70b71b2e7d87897979b34e1
- MD5 d867a8864ec8b4ae75b5465af0e080dd
- SHA1 64c329f055930ccd1bfebea7be2771e752bea466
- SHA512 bfc4ada2e09284055885f4e52fcde19f744efe075518dbcf3c9a0b71a67458c1654a0f7d2e1d979b98f5587c4dbbcdef2d404fede8c79524530a3bcbd9aa573b
- SSDEEP 192:uW4hWlca8Lxyf7LRroihrS+BEMUNn9X01k9z3AwYq8M:uW4hWlcaGAf7pofgEMW9R9zBYJM
- TLSH
  T100A24BC28B78D003F95B6EB092E5EA637C3D67C70850A95259D4F1582CE37C2F72462D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-errorhandling-l1-1-0.dll
- Size 22KB
- SHA256 ce83855b81333be8ca07a70700bff553dfb94869637dfe529bc8ef64094032be
- MD5 7410f759a304d0bc6bbcc78fa6cc4430
- SHA1 7f551a1944b64eadab563fb0508830b878ed19a5
- SHA512 9d07f05f62d61a0cffda83851b41aec7711a643a89d1dbdf4e2aaf63983ce57ae0a521b07a25243f13af2c953a6085cc32599596b0c60db7f015542c011679e9
- SSDEEP 192:6X/mxD3azW4hWeca8Lxyf7LRroihrSudc2qKIxYPVCX01k9z3A9M53y:6PNzW4hWecaGAf7pofuzER9z6W3y
- TLSH
  T1E4A25C829B78D003F98B6E7062D5EE537C3CABC34C90A65646D4F1042CA77C9EB2863D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-fibers-l1-1-0.dll
- Size 22KB
- SHA256 5fae6d3fa0df3ac9a0171654062b6518b56bc586ab03d8a05e9cd4a112628934
- MD5 de531d749cf9cc93c226be08cccd93d7
- SHA1 664fe7c7c043dff3fd1bdf96c44226c9490e0e85
- SHA512 7839777405a97063f91b0247e3c9468d1155646d6411e1797502ecb223fa6d61ae362d809d496c6931bedd0b09dfd52fae8c86000ef09e4ff5d825987086622f
- SSDEEP 192:qW4hW6gca8Lxyf7LRroihrSr7X1ATsX01k9z3AwLBbqk:qW4hW6gcaGAf7pofr7FAoR9zPLBOk
- TLSH
  T163A24AC647B8A043FE9B6E7052E5EB977C3CA7C70CA0915A45C4F1480CE77C9E614A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-file-l1-1-0.dll
- Size 26KB
- SHA256 be54476a0d4394d8ca6a5943b6425569403a1a7e939cf9b4948319b450022b45
- MD5 9faba82d01302136c5a7209ed237f36a
- SHA1 c6cf4c84859d28f6c25732c207fcd95775128274
- SHA512 8da4e097a919efa1d874ff864ce1dc0409078a68b18d5f47b8be3a30e44e9ac547c777aa20a3544dad7211c3c48f2cfcda01ea6b8b035a4e985f315705258324
- SSDEEP 384:u32h1UrJPvVrzW4hWLcaGA5lU9xDE3R9zjlAXB:crJPvVrnybbULi9zh6B
- TLSH
  T109C20A83DA74E28BFC8FDE7111A2DD83683953C7042084961BD4A75C3CE73CAE7985A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-file-l1-2-0.dll
- Size 22KB
- SHA256 87cd5dac0ad2c7f6d64a51c58bc6fb9f2b207fe4966dcf47dd83728b0e439a75
- MD5 bc2ee65102d738282eceae1686902b71
- SHA1 8d9850a29081db23daf692b73313425f5c3a097e
- SHA512 58b9dadb0ec34fe90d9e06cc7402de9b8f742897f6ce46f140724b5e008a5b64e6782cca4afbbc6f7212892054c3c2cbf60d5b7f57e89a8a2b9609ce7b7a07bc
- SSDEEP 192:ruO1W4hWIca8Lxyf7LRroihrSUDAWUNn9X01k9z3AwYqD8FYUKU:rZ1W4hWIcaGAf7pofUMWW9R9zBYAseU
- TLSH
  T1FCA25CC28738D143F99B5E7062E9EA637C3DABC30850D4525AE9F15828E3785FA2473D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  HowToFishSaveEditor\_internal\api-ms-win-core-file-l2-1-0.dll
- Size 20KB
- SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
- MD5 50abf0a7ee67f00f247bada185a7661c
- SHA1 0cddac9ac4db3bf10a11d4b79085ef9cb3fb84a1
- SHA512 c2694bb5d103baff1264926a04d2f0fe156b8815a23c3748412a81cc307b71a9236a0e974b5549321014065e393d10228a0f0004df9ba677f03b5d244a64b528
- SSDEEP 192:lC+WvhWRWYnO/VWQ4SWHvD480Hy5qnajsBkffy2:4+WvhWRUGEslECl
- TLSH
  T16A9229D29BACD083F9677D7012D0D443BD3DA7D72550806A1AD8E6AD2C833C1EB14B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Discovers running processes

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32