2af00edce7ef3266897e52dc81e8de3b7a079028c0f1f96eaff9e38ad342f617 | Triage

Analysis

max time kernel
95s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-10-2024 20:54

Sharing

Report Analysis Logs

General

Target

MicRooCerAut2011_2011_03_22.crl
Size

1KB
MD5

f0cf5b1794eca7cd73f9c020daab8ef2
SHA1

cd040b212f8cd90e629e7acefd14972b68e575ea
SHA256

2af00edce7ef3266897e52dc81e8de3b7a079028c0f1f96eaff9e38ad342f617
SHA512

55c9f22bc101c986b2e83f31e20415031fbf1fbfedd33907487de75069c43c5cfe3ba243025de6b66405925ba506f66d19d9da69af187f499143bc2da71341de

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2364	rundll32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2364	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCRL C:\Users\Admin\AppData\Local\Temp\MicRooCerAut2011_2011_03_22.crl
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads