Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/07/2026, 17:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TestApp.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TestApp.exe
Resource
win11ltsc2024-20260630-en
3 signatures
150 seconds
General
- Target TestApp.exe
- Size 98KB
- Sample260705-vp3wcses9t
- SHA256 5e5b8dc399cae41b9c9461936c7d41efc0490b216b663b8d907cf02faa85d52b
- MD5 a4d19b345b918f41d19ee3ef4471df6c
- SHA1 ed35f6c0fdba12f45ea12bb76364710fc30d6d4b
- SHA512 0dfcf3319f7c9c2e60bbf48af4b8eb1fe275f29809e2332960094c078d754052c0e737292ac140d3adf3d349690010fee181b50138da52d42f56adea0491c52e
- SSDEEP 1536:r8iyPzhNWLUuf8TlFJYd7SbbeSn6xrEv86a+6pStMxRVGUFCsyF1i:S60TlF+gd6xsba+64WjFCsyF1
- TLSH T13DA35C27DE15617ED35AD5B8CA525D02DF72B88507A1ABCF1B804DE30E06AE8AF3F501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1749168396-1890032557-311772428-1000\Software\Microsoft\Windows\CurrentVersion\Run\CatClawAgent = "C:\\Users\\Admin\\AppData\\Local\\Temp\\TestApp.exe" TestApp.exe - Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 2 discord.com 4 discord.com 1 discord.com - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4756 TestApp.exe