Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0x0008000000023274-498.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0x0008000000023274-498.exe
Resource
win10v2004-20230915-en
Target
0x0008000000023274-498.dat
Size
231KB
MD5
f86b7f64a29d67fd1a64051da2c22c15
SHA1
f011a39e8862c0f0a61968e7739ec72179daee88
SHA256
0891d53076f0e9a9d45ec56951c96c4164557ff077fecad7fc4f62ce791c3b93
SHA512
dadcd4406c76ce35a5ee43ab33367d7476b67c294aff95138f420c68f6d0bb44863ed8f449508bedf8209819a4a6390456091b38483ac2fd1c89fe59c19be8b2
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
redline
gigant
77.91.124.55:19071
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ