57a1929e2863a92d4e1dfdc5c0f34edfd28e7b7a8995a5afb5da3653d1ca4856 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-04-2024 12:39

Sharing

Report Analysis Logs

General

Target

$TEMP/certmgr.exe
Size

77KB
MD5

ec58a1586ad70953d48e3c393163348f
SHA1

f18eebaea4460b057f5b49e8239779f1c0c05bb9
SHA256

a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991
SHA512

05615c1ee6aeaf82a1d52e31f18c4174ae4d44e96fcd4466643f01ef431d4ad5022f3b4eb07e9f472ea43b59e8de5f3b5c10328e7109dafa4c3f3b9ff41b2da2
SSDEEP

1536:Xg63vRMvSytDe5TIUGl9JZhT9gvtYw+WXsA9iYzvlt92LzzqD:vRMvdSTI5l7ZhOvtt+WXsof92HuD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1640	certmgr.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\certmgr.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\certmgr.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads