Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2rh354mD.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2rh354mD.exe
Resource
win10-20230915-en
Target
2rh354mD.exe
Size
231KB
MD5
f377b6698e17edbae38d124e8ad81951
SHA1
05b25656ce71c33a87ca1087a2271bad3284a7e4
SHA256
53a2935b9e4b91272b31e4f0a6c0e3068aab9d15f6845afe1de60ab601cb23f5
SHA512
28219ca2200a952d5f49d6d4d3eb5090da3cad928150610ab0f6716053f9a746e28f4e88e93cf915b1f4e1764dee2ed7910c502cd829ee0d6c4d57648cbace50
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
redline
gigant
77.91.124.55:19071
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ