Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0x000600000002327c-350.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0x000600000002327c-350.exe
Resource
win10v2004-20230915-en
Target
0x000600000002327c-350.dat
Size
230KB
MD5
97d8c5a2232bf69aa9ac32124720d7d6
SHA1
231f56706fa2d2d6bcf78722d58ebd81c18fb7d7
SHA256
286114c943591128b6e4fbd1cd7bb7efa0ad4ebe94064fff1e0b2691adabcef9
SHA512
b6ffbc5696b723808edd0a0490c18ccbee4ee1c3986b71b98e8dae3d32dddb99eb79d0cc4f28da658169e4205cabb3ac79af5b0cce719ab157040c4a5068e386
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
redline
gigant
77.91.124.55:19071
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ