Overview
overview
8Static
static
3catalyst.exe
windows10-2004-x64
1catalyst.exe
windows11-ltsc_2024-x64
1lua54.dll
windows10-2004-x64
1lua54.dll
windows11-ltsc_2024-x64
1radar/rada...g.json
windows10-2004-x64
3radar/rada...g.json
windows11-ltsc_2024-x64
8steam_api64.dll
windows10-2004-x64
1steam_api64.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/07/2026, 03:18
Static task
static1
Behavioral task
behavioral1
Sample
catalyst.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
catalyst.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
lua54.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
lua54.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
radar/radar_config.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
radar/radar_config.json
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
steam_api64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
steam_api64.dll
Resource
win11ltsc2024-20260706-en
General
- Target radar/radar_config.json
- Size 2KB
- Sample260708-dtsgraas41
- SHA256 a53d026a5ce107bde2c92b4238780e61b5394a9c8fbdf10082444c7d018ee329
- MD5 a9a1f06bc8d00b2f1e84ca307eb557e9
- SHA1 9135b0a89055a566849a647422b2b5e1e709bd29
- SHA512 1ca7e87a63dcc08a350529d97d8029c38d1cd8a33e7bd3df45e40a2f70a00a9f26f7ed4b60c34ebf2df6068a3e35e690435dfb8f90a28bb8b916dd6e2bc82058
- TLSH T178515228C8719C97B0893069439B064676A454575CBA3C88330D5A4C4F6EC3FBCBBB9F
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2164 OpenWith.exe