bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412

Resubmissions

30/08/2026, 23:08

260830-242p6stxfy7

29/08/2026, 00:22

260829-an59wavtcz

29/08/2026, 00:05

260829-ac7nkaed727

05/03/2024, 08:25

240305-kbamjsbc9310

Sharing

Copy URL Twitter E-mail

General

Target
setup_katana_zero_1.0.5_(30035).exe
Size 175.9MB
Sample260829-ac7nkaed72
SHA256 bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412
MD5 275a3642a506819785178b133848fe36
SHA1 7af438e1754c7a8f277edb03ab05f6f22331ca67
SHA512 c660cf70d55773c3769b765de0e5ff16fe00d8746ab0179ef3a4fb5bd0044c6b43d9a38489579951351676d7b8146dd90324ccc1511d5f8decf1012be0c53b6b
SSDEEP 3145728:NpIC3SSlwLXoA/EIjpDai1L7BJfmiGn2RMWAPBsFsMGrATwVhO12lBzOHBKjjtB2:NpICicgoA/EIjd9ff5WWA81Ue2l1OHB1
TLSH
T1BE983309E3A669DEE01817768553F7C8686D460ACEF14D212CBCD7DC27EF78105B8A8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  setup_katana_zero_1.0.5_(30035).exe
- Size 175.9MB
- SHA256 bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412
- MD5 275a3642a506819785178b133848fe36
- SHA1 7af438e1754c7a8f277edb03ab05f6f22331ca67
- SHA512 c660cf70d55773c3769b765de0e5ff16fe00d8746ab0179ef3a4fb5bd0044c6b43d9a38489579951351676d7b8146dd90324ccc1511d5f8decf1012be0c53b6b
- SSDEEP 3145728:NpIC3SSlwLXoA/EIjpDai1L7BJfmiGn2RMWAPBsFsMGrATwVhO12lBzOHBKjjtB2:NpICicgoA/EIjd9ff5WWA81Ue2l1OHB1
- TLSH
  T1BE983309E3A669DEE01817768553F7C8686D460ACEF14D212CBCD7DC27EF78105B8A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Modifies file permissions

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2