Overview

overview

8

Static

static

1

certigesti...x.html

windows10-2004-x64

3

certigesti...x.html

windows11-ltsc_2024-x64

4

certigesti...log.js

windows10-2004-x64

3

certigesti...log.js

windows11-ltsc_2024-x64

3

certigesti...put.js

windows10-2004-x64

3

certigesti...put.js

windows11-ltsc_2024-x64

3

certigesti...bar.js

windows10-2004-x64

3

certigesti...bar.js

windows11-ltsc_2024-x64

3

certigesti...rea.js

windows10-2004-x64

3

certigesti...rea.js

windows11-ltsc_2024-x64

3

certigesti...ion.js

windows10-2004-x64

3

certigesti...ion.js

windows11-ltsc_2024-x64

8

certigesti...tFn.js

windows10-2004-x64

3

certigesti...tFn.js

windows11-ltsc_2024-x64

8

certigesti...7.1.js

windows10-2004-x64

3

certigesti...7.1.js

windows11-ltsc_2024-x64

3

certigesti...fig.js

windows10-2004-x64

3

certigesti...fig.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    certigestion-tunnel-master.zip
  • Size 199KB
  • Sample260706-agwf4act6l
  • SHA256 08da919ef4f680bd8a35c278bf904f6ae78febf447109d7c0ae219b4385faeca
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryexecutionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      certigestion-tunnel-master/client/index.html
    • Size 2KB
    • SHA256 e9f6e652de309396ef99b767d599ab0fbb2b99c6767831c60938cc59c0936037
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral1behavioral2
    • Target
      certigestion-tunnel-master/client/src/components/ui/dialog.tsx
    • Size 5KB
    • SHA256 3ffd83bd2940c1191fde091bc47311aebc2b79d78824965a5c446115e58190aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      certigestion-tunnel-master/client/src/components/ui/input.tsx
    • Size 2KB
    • SHA256 0aaad971269e84519fb14928a70777db539b4cacf9f145fecd905ba483a199c6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      certigestion-tunnel-master/client/src/components/ui/sidebar.tsx
    • Size 21KB
    • SHA256 782ec3ba8a570c9a0f6ec12d7e1c1efdee5e02eb2da7aa46131c734e7f7bbea8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      certigestion-tunnel-master/client/src/components/ui/textarea.tsx
    • Size 2KB
    • SHA256 ffbad961ec02f9ca23f4157daa1a4139960c4477a245c216a793b4692dec142c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      certigestion-tunnel-master/client/src/hooks/useComposition.ts
    • Size 2KB
    • SHA256 674c515075a2f318d4ec2291313ba552488de0b2c1aac7f36f3d71c4e34d434e
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12
    • Target
      certigestion-tunnel-master/client/src/hooks/usePersistFn.ts
    • Size 471B
    • SHA256 60cc14f39a3f8b212d7baf4beeaf35f81e09a7c78e4154bcca3477e010879511
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14
    • Target
      certigestion-tunnel-master/patches/[email protected]
    • Size 918B
    • SHA256 4e16e6ff3fde7d6c1024d3e0c8605dc9eb6afb690d0d49958c2f449091813072
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      certigestion-tunnel-master/vite.config.ts
    • Size 5KB
    • SHA256 334aa6992b105e2f9005f723c53e8f8b2b3f386c3f14e27c45ae9f160426e170
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks