Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
NEAS.0x000800000002327c367dat_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0x000800000002327c367dat_JC.exe
Resource
win10v2004-20230915-en
Target
NEAS.0x000800000002327c367dat_JC.exe
Size
231KB
MD5
3ac14c086ef72502c09ec81cff9bc6f7
SHA1
c68f1313ad20747083f8e58123ba7658b1343132
SHA256
2d6e7f036137cdb0ba4d33a562666971a5638cb741ae94ee5906bb915a5ce4f7
SHA512
d36bbf47d4a910af918aa0b97ff9a563ba32964f3fa4ef2566d5d394883ff74caa735eee87891662fbc0bb39ba10d396f5c03ff154921c5f341518b69bd53a3d
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
redline
gigant
77.91.124.55:19071
resource | yara_rule |
---|---|
sample | family_redline |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ