Overview
overview
8Static
static
1More certs.zip
windows7-x64
1More certs.zip
windows10-2004-x64
1.bash_history
windows7-x64
3.bash_history
windows10-2004-x64
3.bash_logout
windows7-x64
3.bash_logout
windows10-2004-x64
3.bashrc
windows7-x64
3.bashrc
windows10-2004-x64
3.profile
windows7-x64
3.profile
windows10-2004-x64
3AAA Certif...es.crt
windows7-x64
1AAA Certif...es.crt
windows10-2004-x64
1AC RAIZ FN...OS.crt
windows7-x64
1AC RAIZ FN...OS.crt
windows10-2004-x64
1AC RAIZ FNMT-RCM.crt
windows7-x64
1AC RAIZ FNMT-RCM.crt
windows10-2004-x64
1ACCVRAIZ1.crt
windows7-x64
8ACCVRAIZ1.crt
windows10-2004-x64
8ANF Secure...CA.crt
windows7-x64
1ANF Secure...CA.crt
windows10-2004-x64
1Actalis Au...CA.crt
windows7-x64
1Actalis Au...CA.crt
windows10-2004-x64
1AffirmTrus...al.crt
windows7-x64
1AffirmTrus...al.crt
windows10-2004-x64
1AffirmTrus...ng.crt
windows7-x64
1AffirmTrus...ng.crt
windows10-2004-x64
1AffirmTrus...CC.crt
windows7-x64
1AffirmTrus...CC.crt
windows10-2004-x64
1AffirmTrus...um.crt
windows7-x64
1AffirmTrus...um.crt
windows10-2004-x64
1Amazon Root CA 1.crt
windows7-x64
1Amazon Root CA 1.crt
windows10-2004-x64
1Resubmissions
30-08-2024 17:58
240830-wkhv3axbkh 830-08-2024 17:38
240830-v7p28axcnp 330-08-2024 17:34
240830-v5fe1awcrh 130-08-2024 17:29
240830-v2wykswbrf 830-08-2024 17:24
240830-vywteawape 830-08-2024 17:19
240830-vvtvmsvhlg 8Analysis
-
max time kernel
140s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30-08-2024 17:19
Static task
static1
Behavioral task
behavioral1
Sample
More certs.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
More certs.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
.bash_history
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
.bash_history
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
.bash_logout
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
.bash_logout
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
.bashrc
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
.bashrc
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
.profile
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
.profile
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
AAA Certificate Services.crt
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
AAA Certificate Services.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
AC RAIZ FNMT-RCM SERVIDORES SEGUROS.crt
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
AC RAIZ FNMT-RCM SERVIDORES SEGUROS.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
AC RAIZ FNMT-RCM.crt
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
AC RAIZ FNMT-RCM.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ACCVRAIZ1.crt
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
ACCVRAIZ1.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ANF Secure Server Root CA.crt
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
ANF Secure Server Root CA.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Actalis Authentication Root CA.crt
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Actalis Authentication Root CA.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
AffirmTrust Commercial.crt
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
AffirmTrust Commercial.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
AffirmTrust Networking.crt
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
AffirmTrust Networking.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
AffirmTrust Premium ECC.crt
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
AffirmTrust Premium ECC.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
AffirmTrust Premium.crt
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
AffirmTrust Premium.crt
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Amazon Root CA 1.crt
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Amazon Root CA 1.crt
Resource
win10v2004-20240802-en
General
-
Target
AC RAIZ FNMT-RCM.crt
-
Size
1KB
-
MD5
e20904b4d3bdd1a014fd1ad247c4571d
-
SHA1
ec503507b215c4956219e2a89a5b42992c4c2c20
-
SHA256
ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa
-
SHA512
d068e9ef43be5f5e5abc3e250e5ab059f9bdcf25532bbdadee76fc288f65f3e17592dea813fac7307ee8b6ef2251c1196bff2d2ad0e72ea4308d551f4887e5e8
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exeC:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER "C:\Users\Admin\AppData\Local\Temp\AC RAIZ FNMT-RCM.crt"1⤵PID:3460
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4072,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:81⤵PID:2308