92bc583bb702fac50a49d59752ec897a445b541089d7fabbf352bc44dac2fc1b

Sharing

Copy URL Twitter E-mail

General

Target
citra-windows-msvc-20240303-0ff3440.7z
Size 20.5MB
Sample260814-w1f2eayeqf
SHA256 92bc583bb702fac50a49d59752ec897a445b541089d7fabbf352bc44dac2fc1b
MD5 d4338f5063f413e1ee0536271173f735
SHA1 3f267ebbe2f1ee2a8bba141e532b6635391e9227
SHA512 ff6d09ebc82adfac034ba721dcbfd50a4a9e95e3665ea65e834b95d88710d5c50327c381950702ffab65a2026664f4e7636ac36c279073969c677ea93941ccea
SSDEEP 393216:WwNDdcLuyHEbB3uvBlhOBAYq/Vbtwz15tJzOnBbjs2Aby0KnSueo:WwHJyHEbFaBeAYMQPzOnBs2I3KSuJ
TLSH
T1072733A9F679F804B2D122A5DAEFEF8DDFD56BAA010688B41F34076C9647DC74F02901
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution ransomware

Malware Config

Targets

- Target
  citra-windows-msvc-20240303-0ff3440.7z
- Size 20.5MB
- SHA256 92bc583bb702fac50a49d59752ec897a445b541089d7fabbf352bc44dac2fc1b
- MD5 d4338f5063f413e1ee0536271173f735
- SHA1 3f267ebbe2f1ee2a8bba141e532b6635391e9227
- SHA512 ff6d09ebc82adfac034ba721dcbfd50a4a9e95e3665ea65e834b95d88710d5c50327c381950702ffab65a2026664f4e7636ac36c279073969c677ea93941ccea
- SSDEEP 393216:WwNDdcLuyHEbB3uvBlhOBAYq/Vbtwz15tJzOnBbjs2Aby0KnSueo:WwHJyHEbFaBeAYMQPzOnBs2I3KSuJ
- TLSH
  T1072733A9F679F804B2D122A5DAEFEF8DDFD56BAA010688B41F34076C9647DC74F02901
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  nightly/Qt6Concurrent.dll
- Size 34KB
- SHA256 013ec9cea89b1e2f8d8963c11c91e2403eba8b3e799abf88f4f70ff8b0d55a8c
- MD5 8d970131d58058ad8ffef6f0f50eac29
- SHA1 85d0d9961474c80a6c61c014723f135b0429071b
- SHA512 cd90c69e98e3635707be424f1b5ebd2b199aa8f875d2bb284eae609e14327560e621317906ec36f71c5a557480244cfbde337538e64dab909744b7240254686e
- SSDEEP 768:aIyfCzslz1Ll8IgrzKDrCgKxnVbGYJlPN0EHWg:sf2slllvgrzKvCgKxngemEHn
- TLSH
  T129F26C8A6A6D02E1F4CBDA7E08D6411EACB7F556B38786CF01458579AC223D13C3FA17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  nightly/Qt6Core.dll
- Size 6.0MB
- SHA256 a230faeeb2bcff6e80b7a8fcfb19350a076cc2ed0fa190e16865bfa0c7e9214f
- MD5 46c0a1684b64081f45070d7c41b501c4
- SHA1 7fe0ddde9b30c01641515126a16b6d06988aa144
- SHA512 8d29f0b15955c73e9bbb026b5b96d196a219bdd33f9579fc3d5ebc50f6757621477000b0908fe3a191ac830d7c76750db55e2d871284c5060b7e626addd340bb
- SSDEEP 98304:3t7KQI1hPYyEeKFdu9CwJsv6t+1j/3WVF:3sQIkoKFdu9CwJsv6t+5/3Wb
- TLSH
  T16B568E1762FA0095D8BBC1398B579503EBB3B81503219BDF01A4A6196FB7BF51A3F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  nightly/Qt6Gui.dll
- Size 8.5MB
- SHA256 42dfcd4c5fea70cd7cac2442529ab57ae09d5ad6da38cdd2cefd932f6eb5c66d
- MD5 3b76150f68eee497f84f3cec0c1fbd82
- SHA1 73488761aad3104f1f2ff7d67318f3d70c783c5a
- SHA512 2b4915ad7edd83360d1071794e9cd503d59da810fcc6cab0652e799c989f8965aa4bd1bf96ac12307582eacb83b3c1641e8d9ce97ed1b8f3da741b2453f1ae1e
- SSDEEP 98304:6aX/98BvOx0NRo91updLKZJ/nZcYBUfQCiOR5Q0:6aulNRM1upduZJ/ZcYsQCbR5p
- TLSH
  T121969D97A2E911D8C53BD13C8B5B9607E7B270150362DBEB02A4CA552F33BE12A7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  nightly/Qt6Multimedia.dll
- Size 815KB
- SHA256 ac4e900a546ca2ab56ffa1e9b3aa9a072a60650c60149d9fb778fffab2b35ad9
- MD5 69d226822b75c1268696197f47d6a737
- SHA1 5b4ae01ecd9a3c60aaa1db6e4ec483d710d2a60f
- SHA512 1e14f8712b815774c2fff7cd293a96410792f9e4a2d678d16652409bcf3be573e43c62d5545382a7120c49cbfb5eb2e3b5e7c2080256a126c5d0e90edc304c44
- SSDEEP 12288:V3aUPCXVd3jVCktqurgNDzLZsWRSFA9OMFAykWfWO8Gie19CO/WEw:VqUPCFdpZtqur8DzLZsAfFARMF9CO/Wd
- TLSH
  T1ED056C6FB7A90486D437D23D86878A12E7B2B0144343DFCF52A5462A2F27BD12E7D364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  nightly/Qt6Network.dll
- Size 1.4MB
- SHA256 b7839d313a86d413c67c3f57d3adc0d277345d6c9d04b3364e3771a7bd1c8c55
- MD5 7859ab5090780d2d8a3bd67d9594d9d6
- SHA1 908dcb1c397d6172866d040d14e28bdcda99df30
- SHA512 4456c2f780f8d080963855f8775e81fd3de12c17e6d8cc928381be75e8e7b32f152484f5893cbaeaaf2995b671c99fddcb03af2f09a68e5ec4eb0fcf9b5509c1
- SSDEEP 24576:ByPs85QwVlgkdHWhxHLwpHdgc53a50SKGcCVYY1:BaR5tVLMhkHHS7cWl
- TLSH
  T195657C57A3A00195D8AAC17DC70B8A07FA76700143629BDF466CCE552FB3BE26B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  nightly/Qt6Svg.dll
- Size 374KB
- SHA256 4de1a81c070c33a3e48772d7003e3a9454d69951fc4f5da8132ed7a03c84597d
- MD5 365ae83f71887535ab064674277e04e3
- SHA1 9d50aba7d490425d7e5507d47175de3ce354af85
- SHA512 d544bb66a9426e7a6577a8041c844d19ee6aeb9bce11a073e7bd693d68a3e12fc8e24978cfc6cd5f3ffdf30265b62397f42265f71853a2f23d593cfb5829bf7c
- SSDEEP 6144:C0tc98PpG5czgcVjDA4dqBbS0uJuKTZJiXI10+fTnmwk4s/Eo:C0Xn9VHbA+0SuK7vs/Eo
- TLSH
  T12F845B6BFBA50485E46BD13CC66B8807E6B3708803A397DF026D8A552F23BD17A7D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  nightly/Qt6Widgets.dll
- Size 6.2MB
- SHA256 0f040d7f14e1a6cec10b80d9e90065c2e3b5f8f4aab7a45244dd7327a1bf1c20
- MD5 373e8fc6044b19fe2857b71ebf83a3a4
- SHA1 af15b5da48d07c0883170a6089976a29b1d427a9
- SHA512 9f4a93b946d26118c313719e753a0bdc78bf075a072b74d221dcdf31163f60b92521a8bcd4f5287deea885f7cbfbfb06ae52c60fcf1e7a61ab0f2e00c2a793d3
- SSDEEP 98304:kMh8shJ/KQWlIfwiaptySLjwY4qTxSEuGnEcE:nh8shJ/KQCIoXptySLjwqTcBGA
- TLSH
  T1C4567C57B3AA0185C46BD23DCB1F8A03EA72700443629BDB1265CE592F737E12EBE355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  nightly/README.md
- Size 4KB
- SHA256 1466a825150c613267d8ab061e6e729256562c2bdc65c1eeb6620028b1e975da
- MD5 3f14e4056fe49b06f75d60c06fa041d2
- SHA1 8d920d16819ae470e6c854f8f60478944b687242
- SHA512 8dd50389b1ea7216412bffea80b4116b8f84b35958e36457b8f71a0d0b729a5314efe9f44811573935950425abd66ed0da130440aae637c254a0b4938162c1d3
- SSDEEP 96:cIMJzZyxzdjGnivgqvb5whcWlxbvoR8pIcbxubZvVUOYy:c2zdqnivD9DUIcbxubZtUO3
- TLSH
  T1F8A12FF71568066E0B812383A0593DDCE22BA05FDBA94C5CBA5D450FA756D2343BF289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  nightly/citra-qt.exe
- Size 27.5MB
- SHA256 8450b9bf8caec4e9ede9fd20495d0dae52c36e37c119c4be6aee706f66a62ac2
- MD5 c1331abf422e09065a0cd2c967e10e39
- SHA1 9110fe0d9d063a2a02d04f36d600a96ba3ad66fe
- SHA512 fd2d52133aec16517a4a1ff59b261b7450d1021e8f00f18f1f7678c21b376c24c4e97a99d74a6ed42fcbcfc05272a12c415a99d48a56f266561617cc5b1b0142
- SSDEEP 393216:4YnBTuiKj4mDvlXb/NG7bzbSGJNoheiYL5R2WGnf2yoQzBsW1Ukcl4n4/Aw7wZvs:4IBCeW0Ivi
- TLSH
  T1D5579E0672A804E9F4BBD17ACD579006C3B27C624B649EDF019877284F7BAE41F3AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Drops desktop.ini file(s)
behavioral19 behavioral20
- Target
  nightly/citra-room.exe
- Size 2.5MB
- SHA256 b958b7483cb6e8c60542d2ad496fde718553dff820dc6db3dd58093a6cb6beec
- MD5 68f8193f8fad85f18d42b260e0cee611
- SHA1 0e0f2f60a4905e58ecf50b83e0b049967b9e91bf
- SHA512 3c9ee950fff502b7641307cafbfe35ef6f5331b1d77fe995f4ddb4eb881aed8604b54f45d19a0bbf7f5196d1411781a9f51bb7ba5a1e6889b6cbfa0ff3fa8a67
- SSDEEP 49152:9AjjQuniCMEm356+4263+TyRyTSiaN5b6bFPrJI:9AbZKZST5b6bRJ
- TLSH
  T1C5C56D52B25800E8D9BAE278C61F891BD7727D451B22FBDB1660775A1F33AD10E7E380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  nightly/citra.exe
- Size 21.4MB
- SHA256 53087fb66a5e76bf6fe23bfe324c25c257c39b97fb1eefd8c69a8c917a104f27
- MD5 4d9b559a6f2081e4dc97941483d6a714
- SHA1 83e71d8a9baabe945849cd849c60015999073dd8
- SHA512 c9c33d22dc5dbf420c46c245ba0631aa7c4069166c0487f07c5ee647f617de134dd7928135ece2ed827de20e9d457deadc9e43279790d747269cc63d0d443d9d
- SSDEEP 393216:E+ROWDIZSRkqpf+Ao+7Ik8VHbQguuG53Q5GJfQJ2I64QwOEonaxOO5hmsaQsBH5+:EotEWG
- TLSH
  T175379E5AF35801DAC47AE038CE179043D2737CA64F60A6DB1194776A9F73EDA1E3AB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  nightly/dist/citra.png
- Size 17KB
- SHA256 73c4b6dcd863c624136674ca90a16d8b58e57cae291ae01e54e02e66fbdde405
- MD5 72aa384dc4f36c5bdc9c22ceb22b2f32
- SHA1 d574a548d779a77c8555cb2ba52f870bbb77250b
- SHA512 b4a98383c8370f606e796332862e36a6e30b922885efcf4097eb4b7b71eee206b672e84db2036d2582b783e58e435f23776cd4b61f15b53684f6906871e2c5c5
- SSDEEP 384:PpEsf80kXcW793tqg0oVYNrw9f4S0PD1UxOcznNLfWxA/xYPK:RP8vcW/qnGKw9ODSPn9AA/cK
- TLSH
  T10C82D0D9CE8D1CD1EC97ABC32E60E6A706A92C14915608D4A1CA3D3DCAF24BC1F49B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  nightly/license.txt
- Size 19KB
- SHA256 8bd137ca8047a040d6d7e96b68910bc3b78b9b223c13420113f92c0e0fd39452
- MD5 90df4d454db203057f5860b62f8771e3
- SHA1 dc038d536a218fbecb83c6ad28990e9b8e655699
- SHA512 f498a5987530cf8595c34450df616bfb890a566e4faa4f4bbe6669ef49c8bc0864533ab376661ebfc8857c7b86851d9c489388e60f9da48bce5dd39a0db19223
- SSDEEP 384:Thj2PmwERb6k/iAVX/dUY2ZpEGMOZ77o0UDqHnfBVRbVXSIavl6J:Th6un1iYWrTXo0UDqHmy
- TLSH
  T14492931FB70543F206E202916A4B68DEE32AD0B9767E1154345DC1AD237FE34C3BEA99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral27 behavioral28
- Target
  nightly/plugins/generic/qtuiotouchplugin.dll
- Size 99KB
- SHA256 5d2989c6d57eb361a5f293ae26de84d0f1b6985b381a4629bf4690d441018229
- MD5 6200207c67803e9a50ebe3d8540decd4
- SHA1 47f6b4dcc1033d242921eed2a6d32eb301c48268
- SHA512 fbda304a5135e9f0de77d4b110759654dbd38420a6a831888543d82bfc4b6d7afd450c34b3fed6a8eec3de31300f26b0f007438705e08d5094882b75bd1c8115
- SSDEEP 1536:gaNpg9DKI1TCnEDa5JrQ5SHKfNpxS10l4VG4GCCISkzvfZMKLOG4gKxngeaEHE:gaYWnEOfk5DN80lSGCCI1ZMKLOGxKWEk
- TLSH
  T110A36D6B229442E1D46AC17EC7978507E772B4256732AFDF02A0865A0F37BF12E7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  nightly/plugins/iconengines/qsvgicon.dll
- Size 69KB
- SHA256 35e9c2f0e54aed7493e85c8a10e0a620585d04821c6dbe82b9fe48be19ff28a1
- MD5 88b03988ca27c2e3cea7d33d699eb17a
- SHA1 f4c71b9e6543ef9a7b183fdec888d7b8a11fc7e7
- SHA512 2fd59ff2161e68351e59ce80b53c54b525981738c8d80e4af047ad3c5acd9ecf1e281ae812abcf9999ffb2c750c7f09dd98c0b5dd343905ec3af615337e1fb41
- SSDEEP 1536:UzibTbDQn6wcma+mHKT6IQubV5awBeBx3IPIT2k/6JRT9WvsgKxngeLEHo:UObTzq6IQubV5awBeBx3IPITF6JRklKH
- TLSH
  T163636C4B57A50148D8ABC63EC327C64BDE75B4503B51A7EF0360C9323E77BD16AB8A60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32