General

  • Target

    citra-windows-msvc-20240422-a8e601a.zip

  • Size

    29.8MB

  • MD5

    4743633200127cef4f1b9582b6a04d64

  • SHA1

    4e659428082359b281ec1b807d65ace174499e54

  • SHA256

    edaadb00b40ece9e3c34be5cf2965f94841af7e8e6680d194154775c2699d7c6

  • SHA512

    6b663569ad23ac46325bf3bbc0e73f52e9f6ffad901853213fb2e16acf44660b0abe4e267800cc2e44e112071802fe2fab70ffd6498df6ba65551ce82df96332

  • SSDEEP

    786432:Iwu5onP52IyWB4QN94b0s76zeldEdIrT5hEPLTRLiOSvvY/qRx2ZXD:Iwfx2IyWBjNmAKrBT7TOkOp

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • citra-windows-msvc-20240422-a8e601a.zip
    .zip

    Password: infected

  • citra-windows-msvc-20240422-a8e601a\Qt6Concurrent.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    96b2c85b20d6b67cfa48d4d0315945cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Core.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    c094642934473e68fb804caf70ed018b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Gui.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    ee69ce46f8a4aaf0cf820e96d5f0423d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    6c3361b8662e9f7a6e9cb61de6741d28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    4800f83176152b668676f7b55e467234


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Svg.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    dbcef94a95e5d2f75f3ab3fb4e22e1d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\Qt6Widgets.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    51f5af931b0c20fd993698517bdbde26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\README.md
  • citra-windows-msvc-20240422-a8e601a\citra-qt.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    d60bc5435cd127cd49407982cf736923


    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\citra-room.exe
    .exe windows:6 windows x64 arch:x64

    4a8c42040dd8b86d74bc4f981fd323d0


    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\citra.exe
    .exe windows:6 windows x64 arch:x64

    80229b367b6ef0b9387350b536265433


    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\dist\citra.png
    .png
  • citra-windows-msvc-20240422-a8e601a\license.txt
  • citra-windows-msvc-20240422-a8e601a\plugins\generic\qtuiotouchplugin.dll
    .dll windows:6 windows x64 arch:x64

    32da449f9c82fdbd1e7b03bd12483005


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\iconengines\qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    8b9b3d8aaf8018f40682b772d44db9cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\imageformats\qgif.dll
    .dll windows:6 windows x64 arch:x64

    b2db3f965cb6789d5ba51bedb32753b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\imageformats\qico.dll
    .dll windows:6 windows x64 arch:x64

    4d06e0a222bdbb1181cb5f5a645e42da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\imageformats\qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    1881afc6c302c5efcb3b82f4d423f296


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\imageformats\qsvg.dll
    .dll windows:6 windows x64 arch:x64

    c8b16ce5c404b59a14bb4cce9b8e34ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\multimedia\windowsmediaplugin.dll
    .dll windows:6 windows x64 arch:x64

    b9141d4d4805aab59036e260ecfa5019


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\networkinformation\qnetworklistmanager.dll
    .dll windows:6 windows x64 arch:x64

    9f4bafab8d4171dec8514c9f3eef4b55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\platforms\qwindows.dll
    .dll windows:6 windows x64 arch:x64

    2d9bb4847b9648405dd423c222c9e675


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\styles\qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    274aaaa812c31e04ae8598b62a933223


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\tls\qcertonlybackend.dll
    .dll windows:6 windows x64 arch:x64

    065bc1ebf74a8cf7d8499265d7bcde19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\tls\qopensslbackend.dll
    .dll windows:6 windows x64 arch:x64

    e44697b77a9b44dd83a52a47ccc7f8e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\plugins\tls\qschannelbackend.dll
    .dll windows:6 windows x64 arch:x64

    00a68d9f08ff9af8e796c21b017e0a6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • citra-windows-msvc-20240422-a8e601a\qt.conf
  • citra-windows-msvc-20240422-a8e601a\scripting\citra.py