66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6

Submit
Reports

Overview

overview

Static

static

Go Daddy R...G2.crt

windows7-x64

Go Daddy R...G2.crt

windows10-2004-x64

Hellenic A...15.crt

windows7-x64

Hellenic A...15.crt

windows10-2004-x64

Hellenic A...11.crt

windows7-x64

Hellenic A...11.crt

windows10-2004-x64

Hellenic A...15.crt

windows7-x64

Hellenic A...15.crt

windows10-2004-x64

Hongkong P... 1.crt

windows7-x64

Hongkong P... 1.crt

windows10-2004-x64

Hongkong P... 3.crt

windows7-x64

Hongkong P... 3.crt

windows10-2004-x64

ISRG Root X1.crt

windows7-x64

ISRG Root X1.crt

windows10-2004-x64

IdenTrust ... 1.crt

windows7-x64

IdenTrust ... 1.crt

windows10-2004-x64

IdenTrust ... 1.crt

windows7-x64

IdenTrust ... 1.crt

windows10-2004-x64

Izenpe.com.crt

windows7-x64

Izenpe.com.crt

windows10-2004-x64

Kano Creds.crd

windows7-x64

Kano Creds.crd

windows10-2004-x64

Microsec e...09.crt

windows7-x64

Microsec e...09.crt

windows10-2004-x64

Microsoft ...17.crt

windows7-x64

Microsoft ...17.crt

windows10-2004-x64

Microsoft ...17.crt

windows7-x64

Microsoft ...17.crt

windows10-2004-x64

NAVER Glob...ty.crt

windows7-x64

NAVER Glob...ty.crt

windows10-2004-x64

NetLock Ar...ny.crt

windows7-x64

NetLock Ar...ny.crt

windows10-2004-x64

Resubmissions

30-08-2024 17:58

30-08-2024 17:38

30-08-2024 17:34

30-08-2024 17:29

30-08-2024 17:24

30-08-2024 17:19

Analysis

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
30-08-2024 17:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Go Daddy Root Certificate Authority - G2.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Go Daddy Root Certificate Authority - G2.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Hellenic Academic and Research Institutions ECC RootCA 2015.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Hellenic Academic and Research Institutions ECC RootCA 2015.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Hellenic Academic and Research Institutions RootCA 2011.crt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Hellenic Academic and Research Institutions RootCA 2011.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Hellenic Academic and Research Institutions RootCA 2015.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Hellenic Academic and Research Institutions RootCA 2015.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Hongkong Post Root CA 1.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Hongkong Post Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Hongkong Post Root CA 3.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Hongkong Post Root CA 3.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ISRG Root X1.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

ISRG Root X1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

IdenTrust Commercial Root CA 1.crt

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

IdenTrust Commercial Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

IdenTrust Public Sector Root CA 1.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

IdenTrust Public Sector Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Izenpe.com.crt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Izenpe.com.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Kano Creds.crd

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Kano Creds.crd

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Microsec e-Szigno Root CA 2009.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Microsec e-Szigno Root CA 2009.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Microsoft ECC Root Certificate Authority 2017.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Microsoft ECC Root Certificate Authority 2017.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Microsoft RSA Root Certificate Authority 2017.crt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Microsoft RSA Root Certificate Authority 2017.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

NAVER Global Root Certification Authority.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

NAVER Global Root Certification Authority.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

NetLock Arany (Class Gold) Főtanúsítvány.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

NetLock Arany (Class Gold) Főtanúsítvány.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Izenpe.com.crt
Size

1KB
MD5

a6b0cd8580da5c5034a339902f556773
SHA1

2f783d255218a74a653971b52ca29c45156fe919
SHA256

2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f
SHA512

3e9adc81fa64fcd7d3475d06eed5eadb113a8aba20060cfe2833b839e8c9f6b9bc4e42f6bb9143fbf346db41d4152c73c9d170183984dd9ba3fdcde2ccbee802

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
3	1848	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER C:\Users\Admin\AppData\Local\Temp\Izenpe.com.crt
1⤵
- Blocklisted process makes network request
PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\Cab912A.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit