66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6 | Triage

Resubmissions

30-08-2024 17:58

240830-wkhv3axbkh 8

30-08-2024 17:38

240830-v7p28axcnp 3

30-08-2024 17:34

240830-v5fe1awcrh 1

30-08-2024 17:29

240830-v2wykswbrf 8

30-08-2024 17:24

240830-vywteawape 8

30-08-2024 17:19

240830-vvtvmsvhlg 8

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
30-08-2024 17:58

Sharing

Report Analysis Logs

General

Target

EC-ACC.crt
Size

1KB
MD5

ebf59d290d61f9421f7cc2ba6de31509
SHA1

28903a635b5280fae6774c0b6da7d6baa64af2e8
SHA256

88497f01602f3154246ae28c4d5aef10f1d87ebb76626f4ae0b7f95ba7968799
SHA512

90085096b0598e9309fc565bcd39918ef3eae9aca6b506085e993e1891584623f659682bf86020a0136d2d7e65e52392144ac89fd8ecabe42296c2fdb8ea76ac

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
3	1856	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER C:\Users\Admin\AppData\Local\Temp\EC-ACC.crt
1⤵
- Blocklisted process makes network request
PID:1856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\Cab46E2.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit