Overview
overview
7Static
static
5Cat-Goes-F...ng.exe
windows10-2004-x64
3Cat-Goes-F...ng.exe
windows11-21h2-x64
3Cat-Goes-F...43.dll
windows10-2004-x64
3Cat-Goes-F...43.dll
windows11-21h2-x64
3Cat-Goes-F...pi.dll
windows10-2004-x64
3Cat-Goes-F...pi.dll
windows11-21h2-x64
3Cat-Goes-F...pi.dll
windows10-2004-x64
5Cat-Goes-F...pi.dll
windows11-21h2-x64
5Cat-Goes-F...es.url
windows10-2004-x64
1Cat-Goes-F...es.url
windows11-21h2-x64
1Cat-Goes-F...up.exe
windows10-2004-x64
7Cat-Goes-F...up.exe
windows11-21h2-x64
7Cat-Goes-F...up.exe
windows10-2004-x64
7Cat-Goes-F...up.exe
windows11-21h2-x64
7Cat-Goes-F...st.exe
windows10-2004-x64
6Cat-Goes-F...st.exe
windows11-21h2-x64
6Cat-Goes-F...64.exe
windows10-2004-x64
4Cat-Goes-F...64.exe
windows11-21h2-x64
4Cat-Goes-F...86.exe
windows10-2004-x64
4Cat-Goes-F...86.exe
windows11-21h2-x64
4Cat-Goes-F...64.exe
windows10-2004-x64
7Cat-Goes-F...64.exe
windows11-21h2-x64
7Cat-Goes-F...86.exe
windows10-2004-x64
7Cat-Goes-F...86.exe
windows11-21h2-x64
7Cat-Goes-F...st.msi
windows10-2004-x64
7Cat-Goes-F...st.msi
windows11-21h2-x64
7Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/05/2026, 12:35
Behavioral task
behavioral1
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/Cat Goes Fishing.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/Cat Goes Fishing.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/D3DX9_43.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/D3DX9_43.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
Resource
win11-20250619-en
Behavioral task
behavioral9
Sample
Cat-Goes-Fishing-SteamRIP.com/STEAMRIP » Free Pre-installed Steam Games.url
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Cat-Goes-Fishing-SteamRIP.com/STEAMRIP » Free Pre-installed Steam Games.url
Resource
win11-20250502-en
Behavioral task
behavioral11
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/dotNetFx40_Full_setup.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/dotNetFx40_Full_setup.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/dxwebsetup.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/dxwebsetup.exe
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/oalinst.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral16
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/oalinst.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x86.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x86.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_x86.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/vcredist_x86.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/xnafx40_redist.msi
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Cat-Goes-Fishing-SteamRIP.com/_CommonRedist/xnafx40_redist.msi
Resource
win11-20260130-en
General
- Target Cat-Goes-Fishing-SteamRIP.com/Cat Goes Fishing Build 12575339/steam_api.dll
- Size 875KB
- Sample260511-psbcmads8m
- SHA256 940e08b8b920b069d2e341fcce6f1c08af956932277f6043712fa293083cceba
- MD5 dfad2ce1930d4a6a68f4db90fe8de6ba
- SHA1 a46ceceb8a5f7d798b987a2bacc3c5cac95bbecf
- SHA512 350f9d4641b1d13dcf18a9f6b6c762b7389d780ee1b34186a62b39f67e61cf4c3e213219a44d45084974420a64964a7b3011852d18344318588efb365a4f50b2
- SSDEEP 24576:PPck5+oeyQGCl7kDOb7JYC9/e6BtkpZ9m:PgoUGCWDyv26Upf
- TLSH T1DD15013A541582F0E5F5D235BE026D0FBBA011DF71192CBC7AA4C532C88BB466E7B5CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral7/memory/4796-0-0x00000000747F0000-0x00000000754E6000-memory.dmp upx behavioral7/memory/4796-1-0x00000000747F0000-0x00000000754E6000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4556 wrote to memory of 4796 4556 rundll32.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Cat-Goes-Fishing-SteamRIP.com\Cat Goes Fishing Build 12575339\steam_api.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:4556 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Cat-Goes-Fishing-SteamRIP.com\Cat Goes Fishing Build 12575339\steam_api.dll",#12⤵
- System Location Discovery: System Language Discovery
PID:4796
-