Overview
overview
3Static
static
1Certificat...23.zip
windows7-x64
1Certificat...23.zip
windows10-2004-x64
101.27.23 -... 2.zip
windows7-x64
101.27.23 -... 2.zip
windows10-2004-x64
1All applic...es.pfx
windows7-x64
3All applic...es.pfx
windows10-2004-x64
1Any Purpose 12345.pfx
windows7-x64
3Any Purpose 12345.pfx
windows10-2004-x64
1Attestatio...45.pfx
windows7-x64
3Attestatio...45.pfx
windows10-2004-x64
1Bitlocker ...45.pfx
windows7-x64
3Bitlocker ...45.pfx
windows10-2004-x64
1Bitlocker ...45.pfx
windows7-x64
3Bitlocker ...45.pfx
windows10-2004-x64
1CTL Usage ...45.pfx
windows7-x64
3CTL Usage ...45.pfx
windows10-2004-x64
1Certificat...45.pfx
windows7-x64
3Certificat...45.pfx
windows10-2004-x64
1Client Aut...45.pfx
windows7-x64
3Client Aut...45.pfx
windows10-2004-x64
1Code Signi...45.pfx
windows7-x64
3Code Signi...45.pfx
windows10-2004-x64
1Digital Ri...45.pfx
windows7-x64
3Digital Ri...45.pfx
windows10-2004-x64
1Directory ...45.pfx
windows7-x64
3Directory ...45.pfx
windows10-2004-x64
1Disallowed...45.pfx
windows7-x64
3Disallowed...45.pfx
windows10-2004-x64
1Document E...45.pfx
windows7-x64
3Document E...45.pfx
windows10-2004-x64
1Document S...45.pfx
windows7-x64
3Document S...45.pfx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Certificates W11 - 01.27.23.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Certificates W11 - 01.27.23.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
01.27.23 - Certificates Sample 2 User 2.zip
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
01.27.23 - Certificates Sample 2 User 2.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
All application policies.pfx
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
All application policies.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Any Purpose 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Any Purpose 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Attestation Identity Key Certificate PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Attestation Identity Key Certificate PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Bitlocker Data Recovery Agent PW 12345.pfx
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Bitlocker Data Recovery Agent PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Bitlocker Drive Encryption PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Bitlocker Drive Encryption PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
CTL Usage PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
CTL Usage PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Certificate Request Agent pw 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Certificate Request Agent pw 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Client Authentication PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Client Authentication PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Code Signing PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Code Signing PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Digital Rights PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Digital Rights PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Directory Service Email Replication PW 12345.pfx
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Directory Service Email Replication PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Disallowed List PW 12345.pfx
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Disallowed List PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Document Encryption PW 12345.pfx
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Document Encryption PW 12345.pfx
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Document Signing PW 12345.pfx
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Document Signing PW 12345.pfx
Resource
win10v2004-20240802-en
General
-
Target
Certificates W11 - 01.27.23.zip
-
Size
1.8MB
-
MD5
597b64475e2057599965b101723409a2
-
SHA1
2267a338f4d7066572f24365af4100747ddae3a4
-
SHA256
6d1b2bb4c88095f6b7a7a29efb730ca043ac736b33ab9f1cbf772013c7761970
-
SHA512
8120c7899746524e7367e3bb8f2baa6d93e82932d49bd6cd3f5fb6ef4983967bf92026a49c4b04444a113dc668c2ca333cc884e0a5136f30e9e3b92e3c181374
-
SSDEEP
24576:Ni9CQ+ncLZ4fsUWiiDASIbqYajhBmjLTy+ei9CQ+ncLZ4fsUWiiDASIbqYajhBmd:ZcH/DASlhMjLTKcH/DASlhMjLTh
Malware Config
Signatures
Files
-
Certificates W11 - 01.27.23.zip.zip
-
01.27.23 - Certificates Sample 2 User 2.zip.zip
-
All application policies.pfx
-
Any Purpose 12345.pfx
-
Attestation Identity Key Certificate PW 12345.pfx
-
Bitlocker Data Recovery Agent PW 12345.pfx
-
Bitlocker Drive Encryption PW 12345.pfx
-
CTL Usage PW 12345.pfx
-
Certificate Request Agent pw 12345.pfx
-
Client Authentication PW 12345.pfx
-
Code Signing PW 12345.pfx
-
Digital Rights PW 12345.pfx
-
Directory Service Email Replication PW 12345.pfx
-
Disallowed List PW 12345.pfx
-
Document Encryption PW 12345.pfx
-
Document Signing PW 12345.pfx
-
Domain Name System DNS Server Trust PW 12345.pfx
-
Dynamic Code Generator PW 12345.pfx
-
Early Launch Antimalware Driver PW 12345.pfx
-
Embedded Windows System Component Verification PW 12345.pfx
-
Enclave PW 12345.pfx
-
Encrypting File System PW 12345.pfx
-
Endorsement Key Certificate - PW 12345.pfx
-
File Recovery PW 12345.pfx
-
HAL Extension PW 12345.pfx
-
IP Security User.pfx
-
IP security IKE intermediate PW 12345.pfx
-
IP security end system PW 12345.pfx
-
IP security tunnel termination PW 12345.pfx
-
Isolated User Mode IUM PW 12345.pfx
-
KDC Authentication PW 12345.pfx
-
Kernal Mode Code Signing PW 12345.pfx
-
Key Pack Licenses PW 12345.pfx
-
Key Recovery Agent PW 12345.pfx
-
Key Recovery PW 12345.pfx
-
License Server Verification PW 12345.pfx
-
Lifetime Signing 12345.pfx
-
Microsoft Publisher PW 12345.pfx
-
Microsoft Time Stamping PW 12345.pfx
-
Microsoft Trust List PW 12345.pfx
-
OCSP Signing 12345.pfx
-
OEM Windows System Component Verification PW 12345.pfx
-
Platform Certificate PW 12345.pfx
-
Preview Build Signing PW 12345.pfx
-
Private Key Archival PW 12345.pfx
-
Protected Process Light Verification PW 12345.pfx
-
Protected Process Verification.pfx
-
Qualified Subordination PW 12345.pfx
-
Revoked List Signer PW 12345.pfx
-
Root List Signer PW 12345.pfx
-
Secure Email PW 12345.pfx
-
Server Authentication - PW 12345.pfx
-
Server Authentication PW 12345.pfx
-
Smart Card Logon PW 12345.pfx
-
SpcEncryptedDigestRetryCount PW 12345.pfx
-
SpcRelaxedPEMarkerCheck PW 12345.pfx
-
Time Stamping PW 12345.pfx
-
Windows 3rd party Application Component PW 12345.pfx
-
Windows Hardware Driver Attested Verification PW 12345.pfx
-
Windows Hardware Driver Extended Verification PW 12345.pfx
-
Windows Hardware Driver Verification PW 12345.pfx
-
Windows Hello Recovery Key Encryption 12345.pfx
-
Windows Kit Component PW 12345.pfx
-
Windows RT Verification PW 12345.pfx
-
Windows Software Extension Verification - PW 12345.pfx
-
Windows Store PW 12345.pfx
-
Windows System Component Verification PW 12345.pfx
-
Windows TCB Component.pfx
-
Windows Update PW 12345.pfx
-
All application policies.pfx
-
Any Purpose 12345.pfx
-
Attestation Identity Key Certificate PW 12345.pfx
-
Bitlocker Data Recovery Agent PW 12345.pfx
-
Bitlocker Drive Encryption PW 12345.pfx
-
CTL Usage PW 12345.pfx
-
Certificate Request Agent pw 12345.pfx
-
Client Authentication PW 12345.pfx
-
Code Signing PW 12345.pfx
-
Digital Rights PW 12345.pfx
-
Directory Service Email Replication PW 12345.pfx
-
Disallowed List PW 12345.pfx
-
Document Encryption PW 12345.pfx
-
Document Signing PW 12345.pfx
-
Domain Name System DNS Server Trust PW 12345.pfx
-
Dynamic Code Generator PW 12345.pfx
-
Early Launch Antimalware Driver PW 12345.pfx
-
Embedded Windows System Component Verification PW 12345.pfx
-
Enclave PW 12345.pfx
-
Encrypting File System PW 12345.pfx
-
Endorsement Key Certificate - PW 12345.pfx
-
File Recovery PW 12345.pfx
-
HAL Extension PW 12345.pfx
-
IP Security User.pfx
-
IP security IKE intermediate PW 12345.pfx
-
IP security end system PW 12345.pfx
-
IP security tunnel termination PW 12345.pfx
-
Isolated User Mode IUM PW 12345.pfx
-
KDC Authentication PW 12345.pfx
-
Kernal Mode Code Signing PW 12345.pfx
-
Key Pack Licenses PW 12345.pfx
-
Key Recovery Agent PW 12345.pfx
-
Key Recovery PW 12345.pfx
-
License Server Verification PW 12345.pfx
-
Lifetime Signing 12345.pfx
-
Microsoft Publisher PW 12345.pfx
-
Microsoft Time Stamping PW 12345.pfx
-
Microsoft Trust List PW 12345.pfx
-
OCSP Signing 12345.pfx
-
OEM Windows System Component Verification PW 12345.pfx
-
Platform Certificate PW 12345.pfx
-
Preview Build Signing PW 12345.pfx
-
Private Key Archival PW 12345.pfx
-
Protected Process Light Verification PW 12345.pfx
-
Protected Process Verification.pfx
-
Qualified Subordination PW 12345.pfx
-
Revoked List Signer PW 12345.pfx
-
Root List Signer PW 12345.pfx
-
Secure Email PW 12345.pfx
-
Server Authentication - PW 12345.pfx
-
Server Authentication PW 12345.pfx
-
Smart Card Logon PW 12345.pfx
-
SpcEncryptedDigestRetryCount PW 12345.pfx
-
SpcRelaxedPEMarkerCheck PW 12345.pfx
-
Time Stamping PW 12345.pfx
-
Windows 3rd party Application Component PW 12345.pfx
-
Windows Hardware Driver Attested Verification PW 12345.pfx
-
Windows Hardware Driver Extended Verification PW 12345.pfx
-
Windows Hardware Driver Verification PW 12345.pfx
-
Windows Hello Recovery Key Encryption 12345.pfx
-
Windows Kit Component PW 12345.pfx
-
Windows RT Verification PW 12345.pfx
-
Windows Software Extension Verification - PW 12345.pfx
-
Windows Store PW 12345.pfx
-
Windows System Component Verification PW 12345.pfx
-
Windows TCB Component.pfx
-
Windows Update PW 12345.pfx