General

  • Target
    Katcha-Setup.bat
  • Size 9.0MB
  • Sample260731-ped7csszet
  • SHA256 2db2849d09d58ad1a4205e7624a8c62f75929231909bc39beb8f24746ccafa4a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • overlord

C2
  • 65.87.7.61:5173

Targets

    • Target
      Katcha-Setup.bat
    • Size 9.0MB
    • SHA256 2db2849d09d58ad1a4205e7624a8c62f75929231909bc39beb8f24746ccafa4a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Overlord

      Overlord is an open-source Windows RAT written in Golang.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks