Overview
overview
8Static
static
1Cert.zip
windows7-x64
1Cert.zip
windows10-2004-x64
1.bash_history
windows7-x64
3.bash_history
windows10-2004-x64
3.bash_logout
windows7-x64
3.bash_logout
windows10-2004-x64
3.bashrc
windows7-x64
3.bashrc
windows10-2004-x64
3.profile
windows7-x64
3.profile
windows10-2004-x64
3AAA Certif...es.crt
windows7-x64
1AAA Certif...es.crt
windows10-2004-x64
1AC RAIZ FN...OS.crt
windows7-x64
1AC RAIZ FN...OS.crt
windows10-2004-x64
1AC RAIZ FNMT-RCM.crt
windows7-x64
1AC RAIZ FNMT-RCM.crt
windows10-2004-x64
1ACCVRAIZ1.crt
windows7-x64
8ACCVRAIZ1.crt
windows10-2004-x64
1ANF Secure...CA.crt
windows7-x64
1ANF Secure...CA.crt
windows10-2004-x64
1Actalis Au...CA.crt
windows7-x64
1Actalis Au...CA.crt
windows10-2004-x64
1AffirmTrus...al.crt
windows7-x64
1AffirmTrus...al.crt
windows10-2004-x64
1AffirmTrus...ng.crt
windows7-x64
1AffirmTrus...ng.crt
windows10-2004-x64
1AffirmTrus...CC.crt
windows7-x64
1AffirmTrus...CC.crt
windows10-2004-x64
1AffirmTrus...um.crt
windows7-x64
1AffirmTrus...um.crt
windows10-2004-x64
1Amazon Root CA 1.crt
windows7-x64
1Amazon Root CA 1.crt
windows10-2004-x64
1Resubmissions
17-06-2024 07:23
240617-h73bbszepa 817-06-2024 07:20
240617-h53t3stfmj 117-06-2024 07:17
240617-h4dhsszdkg 817-06-2024 06:22
240617-g49essyaqa 8Analysis
-
max time kernel
30s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
17-06-2024 06:22
Static task
static1
Behavioral task
behavioral1
Sample
Cert.zip
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Cert.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
.bash_history
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
.bash_history
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
.bash_logout
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
.bash_logout
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
.bashrc
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
.bashrc
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
.profile
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
.profile
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
AAA Certificate Services.crt
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
AAA Certificate Services.crt
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
AC RAIZ FNMT-RCM SERVIDORES SEGUROS.crt
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
AC RAIZ FNMT-RCM SERVIDORES SEGUROS.crt
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
AC RAIZ FNMT-RCM.crt
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
AC RAIZ FNMT-RCM.crt
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
ACCVRAIZ1.crt
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
ACCVRAIZ1.crt
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
ANF Secure Server Root CA.crt
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
ANF Secure Server Root CA.crt
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
Actalis Authentication Root CA.crt
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
Actalis Authentication Root CA.crt
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
AffirmTrust Commercial.crt
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
AffirmTrust Commercial.crt
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
AffirmTrust Networking.crt
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
AffirmTrust Networking.crt
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
AffirmTrust Premium ECC.crt
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
AffirmTrust Premium ECC.crt
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
AffirmTrust Premium.crt
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AffirmTrust Premium.crt
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
Amazon Root CA 1.crt
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Amazon Root CA 1.crt
Resource
win10v2004-20240508-en
General
-
Target
AffirmTrust Premium.crt
-
Size
1KB
-
MD5
c45d0e48b6ac28304e0abcf938168757
-
SHA1
d8a6332ce0036fb185f6634f7d6a066526322827
-
SHA256
70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
-
SHA512
0ab711de6090f25d29ea595fa05e8b58c349ef9b62ecca420c3ce6303d746e5240747a92e58950fa80c5176402eda04864256138e99eaeb904d1db0718ab8181
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exeC:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER "C:\Users\Admin\AppData\Local\Temp\AffirmTrust Premium.crt"1⤵PID:1284
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1416,i,15316930299780304231,7592852768794498680,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:81⤵PID:1588