General
- Target 7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
- Size 2.6MB
- Sample260826-vrtepstajg
- SHA256 7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
- MD5 f9a31333a5a50f3f56b07c932bc98a1f
- SHA1 ebc3275ecf1e9d8113fc009546380e5f7f90c4bd
- SHA512 5de14d02dab37f7cca3441e82c4eee83c2ffb36a333b478f396ac3d2fc8fef8ea66222616443ca61a0e214c8c2402223a770dfc6153570aca886adc3e523a673
- SSDEEP 49152:gc3Ut4WOR84/MeIdiNG0/koaA0MPo4ejtr/SZy4/skgSdMc9cYC9k/sw:h3Ut4WOSmRIdyGpLlJqZy4/LGYbF
- TLSH T1E8C533422F31D0385B13869586D950759FB67BC8DEBEB554E2BE294B63034FEF30A284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
CITIBANK PAYMENTS 26-8-2026/CITIBANK PAYMENTS 26-08-2026.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CITIBANK PAYMENTS 26-8-2026/CITIBANK PAYMENTS 26-08-2026.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
CITIBANK PAYMENTS 26-8-2026/winhttp.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
CITIBANK PAYMENTS 26-8-2026/winhttp.dll
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target CITIBANK PAYMENTS 26-8-2026/CITIBANK PAYMENTS 26-08-2026.exe
- Size 6.1MB
- SHA256 2d3d9438e4885d1d6c69d620873c9933d6f2b61173689ffe91e8e3d7e890d7dd
- MD5 c3e8fefbee49c36dfa66546c0b4194d9
- SHA1 10658c50ba666ba5897cfcf7cac3aaf321efee62
- SHA512 ac301fccd5dec13b412938b962334e8688e85f7ea7b580c3972abc1fb1830d043d467eab830f0bad11ba55eb52f28f2354089aee9c1cf8d917931cf76462508c
- SSDEEP 49152:DVtADpuldfbdYfW9L4D4EVfzoZpIptf4ddaCZQBv2zqiuZkUv75mYPb6oK2yxl43:nl0fW5oV+dqNxmC/
- TLSH T1A556D41166D98FD8C09FD474CE4665B25A237C868F21AFDF0980BE293E766B05E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CITIBANK PAYMENTS 26-8-2026/winhttp.dll
- Size 1.7MB
- SHA256 41c9d25245cc813855ff97eb2f5c3ae36971717c10ed49895e089a0873a05c44
- MD5 fae2e634ebb107674fe3d80c45f0fa0e
- SHA1 d2f115637daf0945cac2beead39454b94fdf7de6
- SHA512 345b14d144d328d3ac427d38fd8d8a6303ee33e209c5755a7fb13b6a2163fe2dd588a62971b031ff6b4a1c9ea6423a92b7aa96c9dcc5a6a9c6161208c971e860
- SSDEEP 1536:C5z2Ko1BzgpRE99BkCCo1sHyAMx8EyvNX2VTYqJqmwDhEcmXnX1+xtPLnt47o3a3:
- TLSH T13885D5381C24EC15B42927CDE9934F8654D1269FEEAFDD03960DD1BB00B6ABB192F4D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.