5d50543722d78eb0738830c61c3dc5dfe0d675dd2711b1bc5e68933591ce3dc6

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 03:18

Target
catalyst.exe
Size 3.1MB
Sample260708-dtsgraas41
SHA256 5d50543722d78eb0738830c61c3dc5dfe0d675dd2711b1bc5e68933591ce3dc6
MD5 b91e606f71c699ba34cbb18160a92cd4
SHA1 24a4db644471819c77ea29639de1d513dc98af94
SHA512 1cbb909c811b39eebeb527acfccd1fc7aea51c8a30b12796e712e4580b5a93d10ff0619087e3f4edba9bebd5a6c0856e5f542febf53eb201fc7ace849758d90f
SSDEEP 49152:vo0EBoMmSLMsrX+eNR7eOI0RU6oIlnJxoNWmLks:gxfbNR/txQks
TLSH
T1E9E5AE41A69941DCD53EE0B8AA53A707F33134051B3596DB27E809698FB3EE05FBEB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6044	catalyst.exe
6044	catalyst.exe

C:\Users\Admin\AppData\Local\Temp\catalyst.exe
"C:\Users\Admin\AppData\Local\Temp\catalyst.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6044