Overview

overview

8

Static

static

1

cert/cert/1.crt

windows10-2004-x64

8

cert/cert/1.crt

windows11-ltsc_2024-x64

8

cert/cert/1.pfx

windows10-2004-x64

1

cert/cert/1.pfx

windows11-ltsc_2024-x64

1

cert/cert/make.py

windows10-2004-x64

3

cert/cert/make.py

windows11-ltsc_2024-x64

3

cert/cert/sign.bat

windows10-2004-x64

3

cert/cert/sign.bat

windows11-ltsc_2024-x64

3

cert/cert/...ol.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    cert.zip
  • Size 178KB
  • Sample260822-2wewfavwht
  • SHA256 41d4bd17a56e355f207bd60e04d4582c4ac142f72085b383ceffe9bd72562cfe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecutionspywaretrojan

Malware Config

Targets

    • Target
      cert/cert/1.crt
    • Size 948B
    • SHA256 b2f6af96a8a695c51e843e912182055c6580afd18b393e905dae07569fde3dde
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasionspywaretrojan

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    behavioral1behavioral2
    • Target
      cert/cert/1.pfx
    • Size 2KB
    • SHA256 6f9ead39a860bb70e25d07adb8b080bab7262d65d8d72315fa184e51c383b666
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      cert/cert/make.py
    • Size 826B
    • SHA256 895a4f33076042d5c5ae4eb91fb309dafed34efd7a9ab75580e9514754951a6f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      cert/cert/sign.bat
    • Size 56B
    • SHA256 6791e30a13b333b3de5940d4e080a4f2c74559506b67c3baa0591ced3b3612a2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      cert/cert/signtool.exe
    • Size 413KB
    • SHA256 09127a5181a8b1a01d0c7cd743b60597a24cefd5ce4fe07358a446d4918a8847
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9

MITRE ATT&CK Enterprise v16

Tasks