66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6

Submit
Reports

Overview

overview

Static

static

Go Daddy R...G2.crt

windows7-x64

Go Daddy R...G2.crt

windows10-2004-x64

Hellenic A...15.crt

windows7-x64

Hellenic A...15.crt

windows10-2004-x64

Hellenic A...11.crt

windows7-x64

Hellenic A...11.crt

windows10-2004-x64

Hellenic A...15.crt

windows7-x64

Hellenic A...15.crt

windows10-2004-x64

Hongkong P... 1.crt

windows7-x64

Hongkong P... 1.crt

windows10-2004-x64

Hongkong P... 3.crt

windows7-x64

Hongkong P... 3.crt

windows10-2004-x64

ISRG Root X1.crt

windows7-x64

ISRG Root X1.crt

windows10-2004-x64

IdenTrust ... 1.crt

windows7-x64

IdenTrust ... 1.crt

windows10-2004-x64

IdenTrust ... 1.crt

windows7-x64

IdenTrust ... 1.crt

windows10-2004-x64

Izenpe.com.crt

windows7-x64

Izenpe.com.crt

windows10-2004-x64

Kano Creds.crd

windows7-x64

Kano Creds.crd

windows10-2004-x64

Microsec e...09.crt

windows7-x64

Microsec e...09.crt

windows10-2004-x64

Microsoft ...17.crt

windows7-x64

Microsoft ...17.crt

windows10-2004-x64

Microsoft ...17.crt

windows7-x64

Microsoft ...17.crt

windows10-2004-x64

NAVER Glob...ty.crt

windows7-x64

NAVER Glob...ty.crt

windows10-2004-x64

NetLock Ar...ny.crt

windows7-x64

NetLock Ar...ny.crt

windows10-2004-x64

Resubmissions

30-08-2024 17:58

30-08-2024 17:38

30-08-2024 17:34

30-08-2024 17:29

30-08-2024 17:24

30-08-2024 17:19

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
30-08-2024 17:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Go Daddy Root Certificate Authority - G2.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Go Daddy Root Certificate Authority - G2.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Hellenic Academic and Research Institutions ECC RootCA 2015.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Hellenic Academic and Research Institutions ECC RootCA 2015.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Hellenic Academic and Research Institutions RootCA 2011.crt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Hellenic Academic and Research Institutions RootCA 2011.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Hellenic Academic and Research Institutions RootCA 2015.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Hellenic Academic and Research Institutions RootCA 2015.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Hongkong Post Root CA 1.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Hongkong Post Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Hongkong Post Root CA 3.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Hongkong Post Root CA 3.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ISRG Root X1.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

ISRG Root X1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

IdenTrust Commercial Root CA 1.crt

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

IdenTrust Commercial Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

IdenTrust Public Sector Root CA 1.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

IdenTrust Public Sector Root CA 1.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Izenpe.com.crt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Izenpe.com.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Kano Creds.crd

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Kano Creds.crd

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Microsec e-Szigno Root CA 2009.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Microsec e-Szigno Root CA 2009.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Microsoft ECC Root Certificate Authority 2017.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Microsoft ECC Root Certificate Authority 2017.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Microsoft RSA Root Certificate Authority 2017.crt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Microsoft RSA Root Certificate Authority 2017.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

NAVER Global Root Certification Authority.crt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

NAVER Global Root Certification Authority.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

NetLock Arany (Class Gold) Főtanúsítvány.crt

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

NetLock Arany (Class Gold) Főtanúsítvány.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Kano Creds.crd
Size

11KB
MD5

025e3791f085fbadf92c303f9d922ca3
SHA1

785e8233910718b2b9d028c856e2e9a61aa66f78
SHA256

bfce60b28793b2c0ef05d83307c4c7347f481c0b2d70ca380566c819e98dcbc7
SHA512

4e572dc77ace7e0778f436f374221babdc666a4e2667df7756e6b32a1a91e26ec37cf871d46316dca8049f980f7961a5133d21559b000aba24200bd324a63c40
SSDEEP

192:ABCuUlbOZW6VkVXxjcmJwT2Mster4qHePnLy8JqwjNw+/AeTiRJ58oIu:ABCuqb2mXxjcMVUr8JqwjNw+/DTk58vu

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\infocardcpl.cpl,ImportInformationCard_RunDll "C:\Users\Admin\AppData\Local\Temp\Kano Creds.crd"
1⤵
PID:2516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2516-0-0x0000000000100000-0x000000000010E000-memory.dmp

Filesize
56KB

Download