certutil

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[certutil](https://attack.mitre.org/software/S0160) is a command-line utility that can be used to obtain certificate authority information and configure Certificate Services. (Citation: TechNet Certutil)

Associated Techniques (4)

ID	ATT&CK	Tactics
T1105	Ingress Tool Transfer	-
T1140	Deobfuscate/Decode Files or Information	-
T1553.004	Install Root Certificate	-
T1560.001	Archive via Utility	-

Aliases (105)

certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe certutil.exe

Used by Actors (13)

APT28
Nation-state

APT41
Nation-state

Earth Lusca
Unknown

FIN13
Unknown

Higaisa
Nation-state

Lotus Blossom
Unknown

Medusa Group
Unknown

menuPass
Unknown

OilRig
Nation-state

RANCOR
Nation-state

Metadata

ID:	700
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00