Overview

overview

10

Static

static

10

Catto.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Catto.exe

  • Size

    343KB

  • Sample

    250404-1z52csvze1

  • MD5

    8ed3ba6941919a0d9bb1cb5007476949

  • SHA1

    95d3a559bb1842ec2b4c6f9d58ef0273f72740ff

  • SHA256

    11e508b38307c2ee091406449b78fc1e5cae7d48ac40e4fc3339cb31a4d52754

  • SHA512

    b1ad1f260c12f6642b54c787d05bf34456dcd7839f3b533583769b694adfe07006524511a2a09018f5c39e1fada17a373614837af2db5f3931eb7b3147e69f47

  • SSDEEP

    3072:wCc9Km9m2n1ycrCcjtTzqP/Jf7R/9lmyAnMyYVO3zlN5xu2ZsRYHeQKkMjnXJ+Zi:Lc9picmax+JAn7Q8zlA+H+QxonXS

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      Catto.exe

    • Size

      343KB

    • MD5

      8ed3ba6941919a0d9bb1cb5007476949

    • SHA1

      95d3a559bb1842ec2b4c6f9d58ef0273f72740ff

    • SHA256

      11e508b38307c2ee091406449b78fc1e5cae7d48ac40e4fc3339cb31a4d52754

    • SHA512

      b1ad1f260c12f6642b54c787d05bf34456dcd7839f3b533583769b694adfe07006524511a2a09018f5c39e1fada17a373614837af2db5f3931eb7b3147e69f47

    • SSDEEP

      3072:wCc9Km9m2n1ycrCcjtTzqP/Jf7R/9lmyAnMyYVO3zlN5xu2ZsRYHeQKkMjnXJ+Zi:Lc9picmax+JAn7Q8zlA+H+QxonXS

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Chaos family

      chaos

    • Renames multiple (195) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks