Static task
static1
Behavioral task
behavioral1
Sample
Correo Externo Reminder You have a new encrypted PDF message from Barrantes Juan Sebastian via Citi.msg
Resource
win7-20230831-es
Behavioral task
behavioral2
Sample
Correo Externo Reminder You have a new encrypted PDF message from Barrantes Juan Sebastian via Citi.msg
Resource
win10v2004-20230915-es
General
-
Target
Correo Externo Reminder You have a new encrypted PDF message from Barrantes Juan Sebastian via Citi Secure Email Portal juan.se.msg
-
Size
511KB
-
MD5
5a9fa1713180709c2d7c0887f230f1d3
-
SHA1
04382732311632285d249cbec250f8aa19258f6c
-
SHA256
6d3f16b8c5bd7ac94dbe12f73524b2fbc56aebb1ab1a780385792f535cae54fd
-
SHA512
0707bfdd63b1fe257f5153822724897b2f05f6a21802b01f751a89b18ebad1030d15af4c90838c6885233556a9b34d82d4cffe450363bdd7206892b2c73f6940
-
SSDEEP
12288:dJ0fBDN347MN8iOt93wfobAKY6wfZGXVlxW/4oRuie6G9qYgVFcxGWtDMOcf8IJC:dJ05
Malware Config
Signatures
Files
-
Correo Externo Reminder You have a new encrypted PDF message from Barrantes Juan Sebastian via Citi Secure Email Portal juan.se.msg.msg
-
http://citi.com
-
https://aka.ms/LearnAboutSenderIdentification
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=cs_CZ
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=de_DE
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=el_GR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=en_US
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=es_ES
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=fr_CA
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=fr_FR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=it_IT
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=iw_IL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ja_JP
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ko_KR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=nl_NL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pl_PL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pt_BR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pt_PT
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ro_RO
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ru_RU
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=tr_TR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=zh_CN
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=zh_TW
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=cs_CZ
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=de_DE
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=el_GR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=en_US
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=es_ES
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=fr_CA
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=fr_FR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=it_IT
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=iw_IL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ja_JP
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ko_KR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=nl_NL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pl_PL
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pt_BR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=pt_PT
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ro_RO
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=ru_RU
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=tr_TR
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=zh_CN
-
https://secureMailCenter.citigroup.com/login.html?questionId=6721f827f3d30ab8&locale=zh_TW
-
https://securemailcenter.citigroup.com/branding/citi/emx/images/emailBanner.gif
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_cs_CZ.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_de_DE.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_el_GR.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_es_ES.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_fr_CA.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_fr_FR.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_it_IT.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_iw_IL.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_ja_JP.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_ko_KR.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_nl_NL.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_pl_PL.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_pt_BR.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_pt_PT.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_ro_RO.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_ru_RU.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_tr_TR.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_zh_CN.html
-
https://securemailcenter.citigroup.com/branding/citi/privacy/notice_privacy_zh_TW.html
- Show all
-