Overview
overview
6Static
static
3citra-wind...440.7z
windows10-2004-x64
1citra-wind...440.7z
windows11-ltsc_2024-x64
1nightly/Qt...nt.dll
windows10-2004-x64
1nightly/Qt...nt.dll
windows11-ltsc_2024-x64
1nightly/Qt6Core.dll
windows10-2004-x64
1nightly/Qt6Core.dll
windows11-ltsc_2024-x64
1nightly/Qt6Gui.dll
windows10-2004-x64
1nightly/Qt6Gui.dll
windows11-ltsc_2024-x64
1nightly/Qt...ia.dll
windows10-2004-x64
1nightly/Qt...ia.dll
windows11-ltsc_2024-x64
1nightly/Qt...rk.dll
windows10-2004-x64
1nightly/Qt...rk.dll
windows11-ltsc_2024-x64
1nightly/Qt6Svg.dll
windows10-2004-x64
1nightly/Qt6Svg.dll
windows11-ltsc_2024-x64
1nightly/Qt...ts.dll
windows10-2004-x64
1nightly/Qt...ts.dll
windows11-ltsc_2024-x64
1nightly/README.md
windows10-2004-x64
3nightly/README.md
windows11-ltsc_2024-x64
3nightly/citra-qt.exe
windows10-2004-x64
1nightly/citra-qt.exe
windows11-ltsc_2024-x64
6nightly/ci...om.exe
windows10-2004-x64
1nightly/ci...om.exe
windows11-ltsc_2024-x64
1nightly/citra.exe
windows10-2004-x64
1nightly/citra.exe
windows11-ltsc_2024-x64
1nightly/di...ra.png
windows10-2004-x64
1nightly/di...ra.png
windows11-ltsc_2024-x64
1nightly/license.txt
windows10-2004-x64
1nightly/license.txt
windows11-ltsc_2024-x64
1nightly/pl...in.dll
windows10-2004-x64
1nightly/pl...in.dll
windows11-ltsc_2024-x64
1nightly/pl...on.dll
windows10-2004-x64
1nightly/pl...on.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/08/2026, 18:23
Static task
static1
Behavioral task
behavioral1
Sample
citra-windows-msvc-20240303-0ff3440.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
citra-windows-msvc-20240303-0ff3440.7z
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
nightly/Qt6Concurrent.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
nightly/Qt6Concurrent.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
nightly/Qt6Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
nightly/Qt6Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
nightly/Qt6Gui.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
nightly/Qt6Gui.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
nightly/Qt6Multimedia.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
nightly/Qt6Multimedia.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
nightly/Qt6Network.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
nightly/Qt6Network.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
nightly/Qt6Svg.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
nightly/Qt6Svg.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
nightly/Qt6Widgets.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
nightly/Qt6Widgets.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
nightly/README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
nightly/README.md
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
nightly/citra-qt.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
nightly/citra-qt.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
nightly/citra-room.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
nightly/citra-room.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
nightly/citra.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
nightly/citra.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
nightly/dist/citra.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
nightly/dist/citra.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
nightly/license.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
nightly/license.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
nightly/plugins/generic/qtuiotouchplugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
nightly/plugins/generic/qtuiotouchplugin.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
nightly/plugins/iconengines/qsvgicon.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
nightly/plugins/iconengines/qsvgicon.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
General
- Target nightly/dist/citra.png
- Size 17KB
- Sample260814-w1f2eayeqf
- SHA256 73c4b6dcd863c624136674ca90a16d8b58e57cae291ae01e54e02e66fbdde405
- MD5 72aa384dc4f36c5bdc9c22ceb22b2f32
- SHA1 d574a548d779a77c8555cb2ba52f870bbb77250b
- SHA512 b4a98383c8370f606e796332862e36a6e30b922885efcf4097eb4b7b71eee206b672e84db2036d2582b783e58e435f23776cd4b61f15b53684f6906871e2c5c5
- SSDEEP 384:PpEsf80kXcW793tqg0oVYNrw9f4S0PD1UxOcznNLfWxA/xYPK:RP8vcW/qnGKw9ODSPn9AA/cK
- TLSH T10C82D0D9CE8D1CD1EC97ABC32E60E6A706A92C14915608D4A1CA3D3DCAF24BC1F49B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4384 mspaint.exe 4384 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4384 mspaint.exe 4384 mspaint.exe 4384 mspaint.exe 4384 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\nightly\dist\citra.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4384
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:556