Analysis
- user interaction
yes - max time kernel
58s - max time network
54s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 05:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CatUD.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CatUD.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target CatUD.exe
- Size 1.6MB
- Sample260730-fty1mstvg1
- SHA256 b3dc85a76b38ff78cba029af8c2f28daecdf93776be7ddf6a536453277a5887d
- MD5 d26d5fe9ff1183c13695320323c6ff1d
- SHA1 4824ec72a0158dfae35765e04f188bfd6c7f978c
- SHA512 87a636132418d9859caee66a6951232bf8a85203930a8934149fe30ffe0758691173974f33ecc51799490f0a5809eb168364ea28c38bf58e081e07d934bd31b7
- SSDEEP 24576:QS8Sf31DhwJAReA4WsDwWPqGIgmfHTv98jjZOivnbeLOk1nqMJbUs+:QaMgeA6x9mbv9ovnKLOkNNtUs+
- TLSH T1F775BF42B2B681ECD16AD078C246A71BE732380907205BDB77D03F596FB7AE05B7A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2604 CatUD.exe 2604 CatUD.exe 2604 CatUD.exe 2604 CatUD.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2604 CatUD.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2604 CatUD.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CatUD.exe"C:\Users\Admin\AppData\Local\Temp\CatUD.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2604
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1988