Overview

overview

7

Static

static

3

7b6e0e0a98...92.exe

windows7-x64

7

7b6e0e0a98...92.exe

windows10-2004-x64

7

$TEMP/DSCT...30.dll

windows7-x64

1

$TEMP/DSCT...30.dll

windows10-2004-x64

3

$TEMP/DSCertEx.dll

windows7-x64

1

$TEMP/DSCertEx.dll

windows10-2004-x64

1

$TEMP/Mobi...32.dll

windows7-x64

1

$TEMP/Mobi...32.dll

windows10-2004-x64

3

$TEMP/NFil...eb.dll

windows7-x64

3

$TEMP/NFil...eb.dll

windows10-2004-x64

3

$TEMP/NpkiCard.dll

windows7-x64

1

$TEMP/NpkiCard.dll

windows10-2004-x64

3

$TEMP/SCSKAPPLink.dll

windows7-x64

1

$TEMP/SCSKAPPLink.dll

windows10-2004-x64

1

$TEMP/UBIK...In.exe

windows7-x64

7

$TEMP/UBIK...In.exe

windows10-2004-x64

7

$TEMP/UBIK...ce.exe

windows7-x64

1

$TEMP/UBIK...ce.exe

windows10-2004-x64

1

$TEMP/UbiKey.dll

windows7-x64

1

$TEMP/UbiKey.dll

windows10-2004-x64

3

$TEMP/UbiK...ll.exe

windows7-x64

1

$TEMP/UbiK...ll.exe

windows10-2004-x64

1

$TEMP/UbiKeyWin32.dll

windows7-x64

1

$TEMP/UbiKeyWin32.dll

windows10-2004-x64

1

$TEMP/Ubik...to.dll

windows7-x64

1

$TEMP/Ubik...to.dll

windows10-2004-x64

1

$TEMP/certadm.dll

windows7-x64

1

$TEMP/certadm.dll

windows10-2004-x64

1

$TEMP/certcli.dll

windows7-x64

1

$TEMP/certcli.dll

windows10-2004-x64

1

$TEMP/certutil.exe

windows7-x64

1

$TEMP/certutil.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2024 22:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/certutil.exe

  • Size

    124KB

  • MD5

    5d44040504c77ca0778c1bf66e1009fb

  • SHA1

    fe4de0245c6ca96aade2f3d53fd274df2df2cb92

  • SHA256

    8bd1dab14e133519eabafd6c1bc449b57d749071b4c45f040a734c82bdb0d503

  • SHA512

    9a25cd8480502986d54ea44dee2bc1254de15a40cc5b6e367ea5baaa40e7df9df8d73a5186166c5a6fecd69115ea4a6d76e508651f9c220ed51b68d71d389c18

  • SSDEEP

    3072:wLHYLWUjUOh73h/NvurB+mLBdQPUjRqv0hpSM:BWUjUO+XBdQPwAv0Xh

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\certutil.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\certutil.exe"
    1⤵
      PID:2224

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads