47faf63ce14e765614dce2a27f1b876640be3cc3645cd33ecb2345d19627d3b7

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
Size 1.4MB
Sample260511-psbcmads8m
SHA256 47faf63ce14e765614dce2a27f1b876640be3cc3645cd33ecb2345d19627d3b7
MD5 3b84ab24ba0e0d89f399bccd7e05aec8
SHA1 7df08a16398faecf53023801e6ac282871a735e9
SHA512 e94ef0c71b0cd8589b2ef2fe26cf120520e7b1c76c4a274d3e55f0d595356b8252c86599fa462c0f0b0497535603cb37da8f752aaa59a2b03da4e24b6b08b660
SSDEEP 24576:0m0JmNZ5aIFPY55k2+F3iU5wXHtUqMvOmOaJXssuc6tLpQ9N2wld08yefCd:eqT255k2+F3iU5E4OaasucIpQ98wldf4
TLSH
T14B657C32374DC235D18F52B15D389B6FE43CA65207E108EBF3841F7A992A5C21B3A65B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3800 wrote to memory of 3624	3800	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Cat-Goes-Fishing-SteamRIP.com\Cat Goes Fishing Build 12575339\steam_api.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Cat-Goes-Fishing-SteamRIP.com\Cat Goes Fishing Build 12575339\steam_api.dll",#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads