Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/08/2026, 17:13
General
- Target CITIBANK PAYMENTS 26-8-2026/winhttp.dll
- Size 1.7MB
- Sample260826-vrtepstajg
- SHA256 41c9d25245cc813855ff97eb2f5c3ae36971717c10ed49895e089a0873a05c44
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 2 IoCs
Network request originating from process or tool commonly abused by malware.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\CITIBANK PAYMENTS 26-8-2026\winhttp.dll",#11⤵
- Badlisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/756-10-0x0000013496310000-0x000001349637E000-memory.dmp
memory/756-14-0x0000000180000000-0x000000018012D000-memory.dmp
memory/756-17-0x0000000180000000-0x000000018012D000-memory.dmp
memory/756-21-0x0000000180000000-0x000000018012D000-memory.dmp