General
- Target CitronV2.exe
- Size 11.5MB
- Sample261023-2cljwavy4p
- SHA256 42972bdc72378a73035186b0951029852f440b27b554851d4430a56e2bad4aa1
- MD5 45714146594edd8dcc0a519d216010a2
- SHA1 f3f5ce5776648b11812d90eed625159232ca0b2c
- SHA512 64ba668766c45dc3a035cc5735e1382390c9ac88eba759759d1b00e0600e8c4e89ed883f0e4f69d300777e1b32480c66d5ac066f1dea49572acae4ba6e2e45af
- SSDEEP 98304:DpYORyNr0/Z3c1WkxrjxqDJq2/OdA9DKCnZCPJ1JdMCqGeY4hZqo7IzbLBW:OORnZc4kxryqqv5KCnZCPJxMl+Yq2A
- TLSH T193C67D87F2E250DCC426C578CA22A233B6613C1F4924FD6B57A0FF261FB17207A69759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CitronV2.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
CitronV2.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target CitronV2.exe
- Size 11.5MB
- SHA256 42972bdc72378a73035186b0951029852f440b27b554851d4430a56e2bad4aa1
- MD5 45714146594edd8dcc0a519d216010a2
- SHA1 f3f5ce5776648b11812d90eed625159232ca0b2c
- SHA512 64ba668766c45dc3a035cc5735e1382390c9ac88eba759759d1b00e0600e8c4e89ed883f0e4f69d300777e1b32480c66d5ac066f1dea49572acae4ba6e2e45af
- SSDEEP 98304:DpYORyNr0/Z3c1WkxrjxqDJq2/OdA9DKCnZCPJ1JdMCqGeY4hZqo7IzbLBW:OORnZc4kxryqqv5KCnZCPJxMl+Yq2A
- TLSH T193C67D87F2E250DCC426C578CA22A233B6613C1F4924FD6B57A0FF261FB17207A69759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.