General
- Target catalyst.exe
- Size 1.7MB
- Sample260625-vafghsdv3x
- SHA256 09aa78612e75371dc5200342ad0eb547cd9608baf5d85ba1bf7db551d3734975
- MD5 3fde557e862659c2d89d5222804fca57
- SHA1 6ce7f1bb7402cefe2d40cee9042d1f730a4aef80
- SHA512 6519bfc43bd97b4ec4fdb9fd39ac8728278691b163588b5ded4298500cb62d7dde6585d5251bc250c134a02f71be86e85914f95536028cdc9a2667011e92a903
- SSDEEP 24576:zFLEK4SYtkcxtwOLLZPh+pK4emZ11Y6eQZ0h0lhSMXlDrp1mL1Km1:oAgR1hJ43ZrNeKDmLQm
- TLSH T1FA859D12E79EC2D9C92DA8BC9612D703E33070022F1587CF67A91D569E17EE05EBEB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
catalyst.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
catalyst.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target catalyst.exe
- Size 1.7MB
- SHA256 09aa78612e75371dc5200342ad0eb547cd9608baf5d85ba1bf7db551d3734975
- MD5 3fde557e862659c2d89d5222804fca57
- SHA1 6ce7f1bb7402cefe2d40cee9042d1f730a4aef80
- SHA512 6519bfc43bd97b4ec4fdb9fd39ac8728278691b163588b5ded4298500cb62d7dde6585d5251bc250c134a02f71be86e85914f95536028cdc9a2667011e92a903
- SSDEEP 24576:zFLEK4SYtkcxtwOLLZPh+pK4emZ11Y6eQZ0h0lhSMXlDrp1mL1Km1:oAgR1hJ43ZrNeKDmLQm
- TLSH T1FA859D12E79EC2D9C92DA8BC9612D703E33070022F1587CF67A91D569E17EE05EBEB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.