Tool
certutil
- First Reported
- Jul 8, 2026
- Latest Reported
- Jul 8, 2026
Reported Context (1)
- command that downloads external content from muckcoding[.]com, saves it as api.db, decodes it with certutil, writes the decoded output as L.ps1, and executes that script with PowerShell execution-policy bypass. Malicious Go Module Reveals 222-Repository GitHub Malware Lure Network
Malware (6)
People (2)
MITRE ATT&CK (18)
Vendors (1)
Products (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.