General

  • Target
    7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
  • Size 2.6MB
  • Sample260826-vrtepstajg
  • SHA256 7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
    .zip 2.6MB
  • CITIBANK PAYMENTS 26-8-2026/Adobe.Acrobat.Dependencies.manifest
    .xml 306B
  • CITIBANK PAYMENTS 26-8-2026/CITIBANK PAYMENTS 26-08-2026.exe
    .exe 6.1MB
  • CITIBANK PAYMENTS 26-8-2026/winhttp.dll
    .dll 1.7MB

7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36

  • SHA256 7e12932675c609471d0f0594f3c3584b8a68efc2aaf698618e690e486158ae36
  • MD5 SHA1 SHA512 SSDEEP TLSH