System[.]Net[.]Security[.]dll

General

Target
System.Net.Security.dll
Size 649KB
Sample261107-v271vafd96
SHA256 a78bd713e807729f15b0e085c67fd6cbfefa85736a2618512d4ff1212759eba5
MD5 e6fe0c24a37216c82679b9a64ad1d29d
SHA1 4990956625368f88c98df264e3906176aaf2496f
SHA512 d4b7649ce3662cbb874e82d4273a35b24a6bad3f0fae7be5ff7f2ae4d13c5aac6a914595f281ff756197e7312125c894cca8283808dd921ee0ab731060d171ad
SSDEEP 12288:fIvt4LDlmNWiYtFtRl6u6ZyznDHYy6oqYGCNlwosn:fIvGLDkO7RfTbnlGMwou
TLSH
T106E46C11A3D08B75E6AF9B3982334831E675AC87B711D7CF5084C99C2F63BC29639762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

System.Net.Security.dll

.dll 649KB

System.Net.Security.dll

SHA256 a78bd713e807729f15b0e085c67fd6cbfefa85736a2618512d4ff1212759eba5
MD5 e6fe0c24a37216c82679b9a64ad1d29d
SHA1 4990956625368f88c98df264e3906176aaf2496f
SHA512 d4b7649ce3662cbb874e82d4273a35b24a6bad3f0fae7be5ff7f2ae4d13c5aac6a914595f281ff756197e7312125c894cca8283808dd921ee0ab731060d171ad
SSDEEP 12288:fIvt4LDlmNWiYtFtRl6u6ZyznDHYy6oqYGCNlwosn:fIvGLDkO7RfTbnlGMwou
TLSH
T106E46C11A3D08B75E6AF9B3982334831E675AC87B711D7CF5084C99C2F63BC29639762
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

dd:84:76:c1:cc:bf:56:58:89:fd:52:7f:6d:75:68:93:29:86:4c:16:48:30:ed:ee:3d:a2:6e:a3:11:ca:00:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2026

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Security.ni.pdb /_/src/runtime/artifacts/obj/System.Net.Security/Release/net10.0-windows/System.Net.Security.pdb

Sharing

General

Malware Config

Signatures

File Explorer

System.Net.Security.dll

generic