Electricfish is Windows proxy and tunneling malware identified by U.S. government agencies as a tool used by the North Korean government, whose malicious cyber activity they track as Hidden Cobra. The analyzed artifact is a 32-bit Windows PE executable, and companion reporting consistently characterizes the family as enabling proxy or tunnel functionality. This role allows network traffic to be relayed through an infected system as part of an operator's remote infrastructure.