66262cd24479f4ad1812508bc71ddc21ea04b168ecf7ca8ca942459e1bc6b1e6 | Triage

Resubmissions

30-08-2024 17:58

240830-wkhv3axbkh 8

30-08-2024 17:38

240830-v7p28axcnp 3

30-08-2024 17:34

240830-v5fe1awcrh 1

30-08-2024 17:29

240830-v2wykswbrf 8

30-08-2024 17:24

240830-vywteawape 8

30-08-2024 17:19

240830-vvtvmsvhlg 8

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
30-08-2024 17:58

Sharing

Report Analysis Logs

General

Target

Izenpe.com.crt
Size

1KB
MD5

a6b0cd8580da5c5034a339902f556773
SHA1

2f783d255218a74a653971b52ca29c45156fe919
SHA256

2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f
SHA512

3e9adc81fa64fcd7d3475d06eed5eadb113a8aba20060cfe2833b839e8c9f6b9bc4e42f6bb9143fbf346db41d4152c73c9d170183984dd9ba3fdcde2ccbee802

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
3	1048	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCER C:\Users\Admin\AppData\Local\Temp\Izenpe.com.crt
1⤵
- Blocklisted process makes network request
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\CabA037.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit