General
- Target CatClawAgent.exe
- Size 46KB
- Sample260705-ry3eeacz5x
- SHA256 5a7fd484b0e853fe5bcdbf6daa7a7a57716c153ddf7922d3f833284a92520e18
- MD5 5140c530a256b5b29d42ee4f30936e97
- SHA1 ebe3634a3ed76157deab58799b7cd32b1d6385b1
- SHA512 e1e2c98bad1750664853a5f806cc0b538d8f4c2a822b39636826a2b2375a410162fc645a35ec4f71026ead9e0dd92524b568013ceb00cffb58c01a0d0cc4d840
- SSDEEP 768:ozlj7CN82cD47HJNFyIKrK9uSLK669cDhMWib9XXMRSZGvd0YGfgHyq:gA8abJhK29r2669cDhG5nM88mZhq
- TLSH T1B723E926DD17912FD31EDDB9D5530C01EE22BCC64BE1B9CF97401CE6096AAE49B3EA01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CatClawAgent.exe
Resource
win11ltsc2024-20260629-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target CatClawAgent.exe
- Size 46KB
- SHA256 5a7fd484b0e853fe5bcdbf6daa7a7a57716c153ddf7922d3f833284a92520e18
- MD5 5140c530a256b5b29d42ee4f30936e97
- SHA1 ebe3634a3ed76157deab58799b7cd32b1d6385b1
- SHA512 e1e2c98bad1750664853a5f806cc0b538d8f4c2a822b39636826a2b2375a410162fc645a35ec4f71026ead9e0dd92524b568013ceb00cffb58c01a0d0cc4d840
- SSDEEP 768:ozlj7CN82cD47HJNFyIKrK9uSLK669cDhMWib9XXMRSZGvd0YGfgHyq:gA8abJhK29r2669cDhG5nM88mZhq
- TLSH T1B723E926DD17912FD31EDDB9D5530C01EE22BCC64BE1B9CF97401CE6096AAE49B3EA01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.