66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6

Resubmissions

30/08/2024, 17:58

240830-wkhv3axbkh8

30/08/2024, 17:38

30/08/2024, 17:34

30/08/2024, 17:29

30/08/2024, 17:24

30/08/2024, 17:19

Sharing

Copy URL Twitter E-mail

General

Target
More certs.zip
Size 271KB
Sample240830-vvtvmsvhlg
SHA256 66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6
MD5 8c0db7cae4c7bfaa4206a7001caf8b98
SHA1 c94d76644237d67bb78d1f7d807801f542e62b6d
SHA512 d42ed046fcdc69efbbc8ebfe62315919e0f7b6a174b5c28dddc31cd471e17159f342204cfe6c45c19773c692329263dfd1dc323a2076106f499022da5c9961e1
SSDEEP 6144:2NTyjVmz9xh12smp75E0Aw62wB2rMk5b5+DY5hMq7f95LU:s+ajj8XrMkP+DQyq7c
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery

Malware Config

Targets

- Target
  More certs.zip
- Size 271KB
- SHA256 66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6
- MD5 8c0db7cae4c7bfaa4206a7001caf8b98
- SHA1 c94d76644237d67bb78d1f7d807801f542e62b6d
- SHA512 d42ed046fcdc69efbbc8ebfe62315919e0f7b6a174b5c28dddc31cd471e17159f342204cfe6c45c19773c692329263dfd1dc323a2076106f499022da5c9961e1
- SSDEEP 6144:2NTyjVmz9xh12smp75E0Aw62wB2rMk5b5+DY5hMq7f95LU:s+ajj8XrMkP+DQyq7c
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  .bash_history
- Size 30B
- SHA256 7032a698c8561c88a6413cfdf4ee82994424f0bb78516b9c75972ee96890c354
- MD5 cd41a63f10a40680b3f60d5fc67af9db
- SHA1 2aee20db5e38cbad53d26001025604dcb7643cf3
- SHA512 60b575fa7b76f05dd096f163c5b645abcd9b64bf961dbd73e6a81f38506ef1b39935dd3e4e16947d30d4c2ec2e5c2f4c50b90e8393dc30b7ed0ed731f20c7bff
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  .bash_logout
- Size 220B
- SHA256 26882b79471c25f945c970f8233d8ce29d54e9d5eedcd2884f88affa84a18f56
- MD5 22bfb8c1dd94b5f3813a2b25da67463f
- SHA1 dc216ac4a4c232815731979db6e494f315b507dd
- SHA512 c3d739f4934824d81f561c9b626b494e3c256b5a97642667882632db030fc1a8c7d23eb1ae5db7e9f63ae46ee84dbee69d15130dd1482a2c1e8aade1dfc545a2
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  .bashrc
- Size 3KB
- SHA256 342099da4dd28c394d3f8782d90d7465cb2eaa611193f8f378d6918261cb9bb8
- MD5 1f98b8f3f3c8f8927eca945d59dcc1c6
- SHA1 c4d853993e323432cb84359de2c319b9a767b729
- SHA512 33bb97936e54fe797b5046ece9c04313306fdc1470c959593f5cc2c641066372f2aee759db3a1bf45470b10c98ca964388172ded77eacaf2500e428d4f00331f
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  .profile
- Size 807B
- SHA256 28b4a453b68dde64f814e94bab14ee651f4f162e15dd9920490aa1d49f05d2a4
- MD5 f4e81ade7d6f9fb342541152d08e7a97
- SHA1 2b9ee6d446f8f9ffccaab42b6df5649f749a9a07
- SHA512 26544e0b85ca6d7cca3b8ace7d01f712e24020f07b6a6ad54a6942909040221f09bf922a4d0da555ce64ceebb4934b28719a23a0e6401337a69d4a0170bd8e4c
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  AAA Certificate Services.crt
- Size 1KB
- SHA256 d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
- MD5 497904b0eb8719ac47b0bc11519b74d0
- SHA1 d1eb23a46d17d68fd92564c2f1f1601764d8e349
- SHA512 1c7941cd6e6b4ea1c96f3f1c06f1a4016ec3cf4dde73a425f2fe5caff0bedfea93824beed384363c8b4f458827ef00fd4ab6c4e072a6f1e69098b0424b97b2a7
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  AC RAIZ FNMT-RCM SERVIDORES SEGUROS.crt
- Size 626B
- SHA256 554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb
- MD5 19369c52032fd2d1bb23ccdd1e1255bb
- SHA1 62ffd99ec0650d03ce7593d2ed3f2d32c9e3e54a
- SHA512 f6a3ed28b65a2e8bd87f8f0b5f444b8ebf3affc1e4594c014e57737e79a96aadae8f2c9b2b46cb46d5a1ddcd8300c0f50c63eb93ef62d844055ea22cc887278b
- MD5 SHA1 SHA512
Score

1^/10
behavioral13 behavioral14
- Target
  AC RAIZ FNMT-RCM.crt
- Size 1KB
- SHA256 ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa
- MD5 e20904b4d3bdd1a014fd1ad247c4571d
- SHA1 ec503507b215c4956219e2a89a5b42992c4c2c20
- SHA512 d068e9ef43be5f5e5abc3e250e5ab059f9bdcf25532bbdadee76fc288f65f3e17592dea813fac7307ee8b6ef2251c1196bff2d2ad0e72ea4308d551f4887e5e8
- MD5 SHA1 SHA512
Score

1^/10
behavioral15 behavioral16
- Target
  ACCVRAIZ1.crt
- Size 1KB
- SHA256 9a6ec012e1a7da9dbe34194d478ad7c0db1822fb071df12981496ed104384113
- MD5 d0a05aee05b6099421a17df1b2298202
- SHA1 93057a8815c64fce882ffa9116522878bc536417
- SHA512 72820a7b6327b5342507dd1cc22cfd70e015370ae3994e5d98dfb5508459035eaebd6bc43df9664bb2b8a3b6a18dcc65ac80f67a1c32fc8bf42631cd89e5235d
- MD5 SHA1 SHA512
Score

8^/10
- Blocklisted process makes network request
behavioral17 behavioral18
- Target
  ANF Secure Server Root CA.crt
- Size 1KB
- SHA256 fb8fec759169b9106b1e511644c618c51304373f6c0643088d8beffd1b997599
- MD5 26a6445ad9af4e2fb21db665b04ee896
- SHA1 5b6e68d0cc15b6a05f1ec15fae02fc6b2f5d6f74
- SHA512 067228dcae01b3f077a65592dee8b9000d24196a3be6f51c43cd00d1912546e7c05bc4104d6f678a9f3cd492b060e57d6f15305cb8f549ea9d1e54a3b239144c
- MD5 SHA1 SHA512
Score

1^/10
behavioral19 behavioral20
- Target
  Actalis Authentication Root CA.crt
- Size 1KB
- SHA256 55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066
- MD5 69c10d4f07a31bc3fe563d04bc11f6a6
- SHA1 f373b387065a28848af2f34ace192bddc78e9cac
- SHA512 4b2d53c7d0a1c65328ef97dd5f9f1b439ea7302362b3c22cda4e489930acdeacf61316c78ce4f454fb593704cb6aafb82291d65c67f00e199f1e0f501328b402
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  AffirmTrust Commercial.crt
- Size 848B
- SHA256 0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7
- MD5 8292ba5befcd8a6fa63d55f984f6d6b7
- SHA1 f9b5b632455f9cbeec575f80dce96e2cc7b278b7
- SHA512 a704de9377637ce8729a29d61c4749cfb77940822d7293050af3ed0bbd0f347f7554729c0e3cd80a9e5463b7b785a5ce5b6f76cbd6e934c2ee01a869db06aa67
- MD5 SHA1 SHA512
Score

1^/10
behavioral23 behavioral24
- Target
  AffirmTrust Networking.crt
- Size 848B
- SHA256 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
- MD5 4265cabe019a9a4ca98c4149cdc0d57f
- SHA1 293621028b20ed02f566c532d1d6ed909f45002f
- SHA512 f2a9475e4de6b1d8650baf7e20503c2ff282958307a526d0a00609e4bbbef7a5b4f8a4fa110c962b1a2813eb0fa9bb10dc7c4316b596a0cf639c0812f36fe71a
- MD5 SHA1 SHA512
Score

1^/10
behavioral25 behavioral26
- Target
  AffirmTrust Premium ECC.crt
- Size 514B
- SHA256 bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423
- MD5 64b00955cfb1d599e2be13aba65dea4d
- SHA1 b8236b002f1d16865301556c11a437caebffc3bb
- SHA512 3b718471f322f7cfd4a9840417c53f33665b64560ae887ab5a1d215a86eff28a9e33a37921d86ef4f308bd5911906cfa503cba9eb1395c585a6e82b2e684d3ed
- MD5 SHA1 SHA512
Score

1^/10
behavioral27 behavioral28
- Target
  AffirmTrust Premium.crt
- Size 1KB
- SHA256 70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
- MD5 c45d0e48b6ac28304e0abcf938168757
- SHA1 d8a6332ce0036fb185f6634f7d6a066526322827
- SHA512 0ab711de6090f25d29ea595fa05e8b58c349ef9b62ecca420c3ce6303d746e5240747a92e58950fa80c5176402eda04864256138e99eaeb904d1db0718ab8181
- MD5 SHA1 SHA512
Score

1^/10
behavioral29 behavioral30
- Target
  Amazon Root CA 1.crt
- Size 837B
- SHA256 8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e
- MD5 43c6bfaeecfead2f18c6886830fcc8e6
- SHA1 8da7f965ec5efc37910f1c6e59fdc1cc6a6ede16
- SHA512 3eaea0ef755c61cff6ef28dcf476a266e253add5be34d91b0392f5bd3be3765bc8af7443120198b861dcec4135022b04ef220281e4a1d3cdbd07c5c088293567
- MD5 SHA1 SHA512
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32