Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
48e43a3420b900e5f2cadf7a6c43eac594c3fac1a753ce80b58367920d36fa47.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
48e43a3420b900e5f2cadf7a6c43eac594c3fac1a753ce80b58367920d36fa47.exe
Resource
win10v2004-20220414-en
Target
48e43a3420b900e5f2cadf7a6c43eac594c3fac1a753ce80b58367920d36fa47
Size
96KB
MD5
fa17295c47a1f3cac859f03ebdf57642
SHA1
f891d02d000eeef76e43b382d3e6cb5d2d46f4ea
SHA256
48e43a3420b900e5f2cadf7a6c43eac594c3fac1a753ce80b58367920d36fa47
SHA512
a98de3ee3c02a6f3961870cc273125798c5c92a81a3d6e5e381e9b8c3db034c390ea3b869ed1a2226dce49987d38a02ebd05827709975d4f33500e3b17a2d811
SSDEEP
1536:2VADQDR0uAnnzqmjStOZdBFlJXy9HCZxNb4AZTGqj3Evy6Jd8UOStx95E8JHhfwy:26DFuAnO6l7BFegxdfzj3QyedLOJ8ZhL
redline
@Lampikkk
87.251.71.226:2997
Processes:
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ