Overview

overview

8

Static

static

1

Amazon_Root_CA_2.crt

windows7-x64

8

Amazon_Root_CA_2.crt

windows10-2004-x64

8

Amazon_Root_CA_3.crt

windows7-x64

8

Amazon_Root_CA_3.crt

windows10-2004-x64

8

Amazon_Root_CA_4.crt

windows7-x64

8

Amazon_Root_CA_4.crt

windows10-2004-x64

8

Atos_Trust...11.crt

windows7-x64

8

Atos_Trust...11.crt

windows10-2004-x64

8

Atos_Trust...21.crt

windows7-x64

8

Atos_Trust...21.crt

windows10-2004-x64

8

Atos_Trust...21.crt

windows7-x64

8

Atos_Trust...21.crt

windows10-2004-x64

8

Autoridad_...68.crt

windows7-x64

8

Autoridad_...68.crt

windows10-2004-x64

8

BJCA_Globa...A1.crt

windows7-x64

8

BJCA_Globa...A1.crt

windows10-2004-x64

8

BJCA_Globa...A2.crt

windows7-x64

8

BJCA_Globa...A2.crt

windows10-2004-x64

8

Baltimore_...ot.crt

windows7-x64

8

Baltimore_...ot.crt

windows10-2004-x64

8

Buypass_Cl...CA.crt

windows7-x64

8

Buypass_Cl...CA.crt

windows10-2004-x64

8

Buypass_Cl...CA.crt

windows7-x64

8

Buypass_Cl...CA.crt

windows10-2004-x64

8

CA_Disig_Root_R2.crt

windows7-x64

8

CA_Disig_Root_R2.crt

windows10-2004-x64

8

CFCA_EV_ROOT.crt

windows7-x64

8

CFCA_EV_ROOT.crt

windows10-2004-x64

8

COMODO_Cer...ty.crt

windows7-x64

8

COMODO_Cer...ty.crt

windows10-2004-x64

8

COMODO_ECC...ty.crt

windows7-x64

8

COMODO_ECC...ty.crt

windows10-2004-x64

8

Resubmissions

21/06/2025, 07:05

250621-hwqhdsxnv68

11/02/2025, 03:29

250211-d16myswldk8

11/02/2025, 03:24

250211-dx9v7swnbw8

11/02/2025, 03:18

250211-dt1hcswme18

11/02/2025, 03:00

250211-dhpxgswlax8

11/02/2025, 01:29

250211-bv85satpdq8

11/02/2025, 01:14

250211-bltnqstmgr8

10/02/2025, 23:56

250210-3y8f7sspdy8

10/02/2025, 23:39

250210-3nh4kasmes8

10/02/2025, 23:26

250210-3e57qssjbj8

Sharing

Copy URL Twitter E-mail

General

  • Target
    mozilla.zip
  • Size 353KB
  • Sample250211-bv85satpdq
  • SHA256 c85a87adee4c099081c0be6a69d7468280f4d289bde882c66af86d023d32288a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discovery

Malware Config

Targets

    • Target
      Amazon_Root_CA_2.crt
    • Size 1KB
    • SHA256 a3a7fe25439d9a9b50f60af43684444d798a4c869305bf615881e5c84a44c1a2
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral1behavioral2
    • Target
      Amazon_Root_CA_3.crt
    • Size 656B
    • SHA256 3eb7c3258f4af9222033dc1bb3dd2c7cfa0982b98e39fb8e9dc095cfeb38126c
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    behavioral3behavioral4
    • Target
      Amazon_Root_CA_4.crt
    • Size 737B
    • SHA256 b0b7961120481e33670315b2f843e643c42f693c7a1010eb9555e06ddc730214
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral5behavioral6
    • Target
      Atos_TrustedRoot_2011.crt
    • Size 1KB
    • SHA256 79e9f88ab505186e36f440c88bc37e103e1a9369a0ebe382c4a04bd70b91c027
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral7behavioral8
    • Target
      Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt
    • Size 782B
    • SHA256 970d70366b2f8c29ac71c8f71689ddd8fd321208a5ededbb2d784af33799a0f6
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral10behavioral9
    • Target
      Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt
    • Size 1KB
    • SHA256 980dc408dd2def2d7930bec10c48e256d115f636c403b631ffb93558dacf5571
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral11behavioral12
    • Target
      Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
    • Size 2KB
    • SHA256 a618213c5dd7cbb59b3154de7241d7255333a0619cf434329becae876ce6e331
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral13behavioral14
    • Target
      BJCA_Global_Root_CA1.crt
    • Size 1KB
    • SHA256 08e1a8115accf7ce400a3f98fc31dbab522a3ed3644ca48389b4899e2d794f1a
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral15behavioral16
    • Target
      BJCA_Global_Root_CA2.crt
    • Size 806B
    • SHA256 6c58125f88a4ff83d40e6b58c5532ea905be4daf1ec7da7f4542af3d34855340
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral17behavioral18
    • Target
      Baltimore_CyberTrust_Root.crt
    • Size 1KB
    • SHA256 d1c290ea1e4544dec1934931fbfa1fb2060eb3a0f2239ba191f444ecbce35cbb
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral19behavioral20
    • Target
      Buypass_Class_2_Root_CA.crt
    • Size 1KB
    • SHA256 9c2a7510e01aec2c9b8cc2c9d03b16576858a93863a6d0a31a2ac05f47f5dbe1
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral21behavioral22
    • Target
      Buypass_Class_3_Root_CA.crt
    • Size 1KB
    • SHA256 8db5b7c8f058c56a8d033c2443d34fdfd3656150eaa73fe63c65161e7063ce99
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral23behavioral24
    • Target
      CA_Disig_Root_R2.crt
    • Size 1KB
    • SHA256 8adefca890c92e6d0877fdcba07655296852217da657026aea69ee547642528c
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral25behavioral26
    • Target
      CFCA_EV_ROOT.crt
    • Size 1KB
    • SHA256 94e4ab21333740d7ed0f2b5007744e5cf6792c0ddf4c6bdfb3ce8333010e7306
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral27behavioral28
    • Target
      COMODO_Certification_Authority.crt
    • Size 1KB
    • SHA256 e273097c7c57cb7cbb908057991ae1774d4e1e8c6a062fb6be9e6645b32fb431
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral29behavioral30
    • Target
      COMODO_ECC_Certification_Authority.crt
    • Size 940B
    • SHA256 d69f7b57250536f57ffba92cffe82a8bbcb16e03a9a2607ec967f362ce83f9ce
    • MD5 SHA1 SHA512
    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
8/10

behavioral2

discovery
Score
8/10

behavioral3

Score
8/10

behavioral4

discovery
Score
8/10

behavioral5

Score
8/10

behavioral6

discovery
Score
8/10

behavioral7

Score
8/10

behavioral8

discovery
Score
8/10

behavioral9

Score
8/10

behavioral10

discovery
Score
8/10

behavioral11

Score
8/10

behavioral12

discovery
Score
8/10

behavioral13

Score
8/10

behavioral14

discovery
Score
8/10

behavioral15

Score
8/10

behavioral16

discovery
Score
8/10

behavioral17

Score
8/10

behavioral18

discovery
Score
8/10

behavioral19

Score
8/10

behavioral20

discovery
Score
8/10

behavioral21

Score
8/10

behavioral22

discovery
Score
8/10

behavioral23

Score
8/10

behavioral24

discovery
Score
8/10

behavioral25

Score
8/10

behavioral26

discovery
Score
8/10

behavioral27

Score
8/10

behavioral28

discovery
Score
8/10

behavioral29

Score
8/10

behavioral30

discovery
Score
8/10

behavioral31

Score
8/10

behavioral32

discovery
Score
8/10