Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0x0006000000023274367_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0x0006000000023274367_JC.exe
Resource
win10v2004-20230915-en
Target
0x0006000000023274367_JC.dat
Size
231KB
MD5
61e563e7362437dd5c6ae53cbe787978
SHA1
7c5ce693836aa889f757594409cf78d3af446e0b
SHA256
8ae3cba46fd829f831c05b5be02f8d35ce6b4fab765b705ec4d9304fd891c2e8
SHA512
1aebc27d9e259074c43a1939439c2eabda22ec4de388f566e9ff17eb03c7e333925300ba85f6a608baa29b2cb38b7ba9515e68db5f0098faa3833476ae94b79b
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
redline
gigant
77.91.124.55:19071
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ