Overview

overview

8

Static

static

1

Cert.zip

windows7-x64

1

Cert.zip

windows10-2004-x64

1

.bash_history

windows7-x64

3

.bash_history

windows10-2004-x64

3

.bash_logout

windows7-x64

3

.bash_logout

windows10-2004-x64

3

.bashrc

windows7-x64

3

.bashrc

windows10-2004-x64

3

.profile

windows7-x64

3

.profile

windows10-2004-x64

3

AAA Certif...es.crt

windows7-x64

1

AAA Certif...es.crt

windows10-2004-x64

1

AC RAIZ FN...OS.crt

windows7-x64

1

AC RAIZ FN...OS.crt

windows10-2004-x64

1

AC RAIZ FNMT-RCM.crt

windows7-x64

1

AC RAIZ FNMT-RCM.crt

windows10-2004-x64

1

ACCVRAIZ1.crt

windows7-x64

8

ACCVRAIZ1.crt

windows10-2004-x64

1

ANF Secure...CA.crt

windows7-x64

1

ANF Secure...CA.crt

windows10-2004-x64

1

Actalis Au...CA.crt

windows7-x64

1

Actalis Au...CA.crt

windows10-2004-x64

1

AffirmTrus...al.crt

windows7-x64

1

AffirmTrus...al.crt

windows10-2004-x64

1

AffirmTrus...ng.crt

windows7-x64

1

AffirmTrus...ng.crt

windows10-2004-x64

1

AffirmTrus...CC.crt

windows7-x64

1

AffirmTrus...CC.crt

windows10-2004-x64

1

AffirmTrus...um.crt

windows7-x64

1

AffirmTrus...um.crt

windows10-2004-x64

1

Amazon Root CA 1.crt

windows7-x64

1

Amazon Root CA 1.crt

windows10-2004-x64

1

Resubmissions

17-06-2024 07:23

240617-h73bbszepa 8

17-06-2024 07:20

240617-h53t3stfmj 1

17-06-2024 07:17

240617-h4dhsszdkg 8

17-06-2024 06:22

240617-g49essyaqa 8

Analysis

  • max time kernel
    15s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 06:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AffirmTrust Commercial.crt

  • Size

    848B

  • MD5

    8292ba5befcd8a6fa63d55f984f6d6b7

  • SHA1

    f9b5b632455f9cbeec575f80dce96e2cc7b278b7

  • SHA256

    0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7

  • SHA512

    a704de9377637ce8729a29d61c4749cfb77940822d7293050af3ed0bbd0f347f7554729c0e3cd80a9e5463b7b785a5ce5b6f76cbd6e934c2ee01a869db06aa67

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER "C:\Users\Admin\AppData\Local\Temp\AffirmTrust Commercial.crt"
    1⤵
      PID:2032

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads