General
-
Target
citadel_1.3.4.5.vir
-
Size
289KB
-
Sample
200719-bstmhk3r2a
-
MD5
8dea3337a2681be366086df2563375ec
-
SHA1
e89098c215538c7afa1f550fc0d73264be1900ab
-
SHA256
ff92eb5433354ad51ba6c586ed91e8b69f32271b0d523352c87f8ae4d075151b
-
SHA512
b700c42189538edd6d67459f492a23759db8ed5a576b674defefab135584abbbd3dca7592d2569e69c77592c42c3f948bcab04e6d9655ddadbe1c809d65ff528
Static task
static1
Behavioral task
behavioral1
Sample
citadel_1.3.4.5.vir.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
citadel_1.3.4.5.vir.exe
Resource
win10
Malware Config
Targets
-
-
Target
citadel_1.3.4.5.vir
-
Size
289KB
-
MD5
8dea3337a2681be366086df2563375ec
-
SHA1
e89098c215538c7afa1f550fc0d73264be1900ab
-
SHA256
ff92eb5433354ad51ba6c586ed91e8b69f32271b0d523352c87f8ae4d075151b
-
SHA512
b700c42189538edd6d67459f492a23759db8ed5a576b674defefab135584abbbd3dca7592d2569e69c77592c42c3f948bcab04e6d9655ddadbe1c809d65ff528
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
-
Suspicious use of SetThreadContext
-