Overview

overview

10

Static

static

5

36de7b18d4...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    36de7b18d49beb2f1afe545596395f30dbdbf2cd0ff89b6a389691ec60f1efbd
  • Size 307KB
  • Sample260826-kaaadsssev
  • SHA256 36de7b18d49beb2f1afe545596395f30dbdbf2cd0ff89b6a389691ec60f1efbd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
citadelbotnetdiscoverytrojanupx

Malware Config

Targets

    • Target
      36de7b18d49beb2f1afe545596395f30dbdbf2cd0ff89b6a389691ec60f1efbd
    • Size 307KB
    • SHA256 36de7b18d49beb2f1afe545596395f30dbdbf2cd0ff89b6a389691ec60f1efbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoverycitadeltrojanupx

    • Detects Citadel payload

    • Family: Citadel

      Citadel is a trojan and botnet written in C.

      trojanbotnetcitadel

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks