eb3b4267.bin

General
Target

eb3b4267.bin

Size

2MB

Sample

201029-fapk5yzxja

Score
10 /10
MD5

fe5b9802204418aa5238c4d2a16d799c

SHA1

eaf47425d900150ceb5f0e88e5e7d08e4634bb20

SHA256

0f170f04c03a6aeb1b60fc29b053fcc981de9229f0aa60ddf7988d3bb3167c23

SHA512

98d6aa61d479adec304b63b9fb07e611767f7f27d3fb2cf267895264100d6d2c4cde92803be9a9216990df9962ebdf84eb39986da7115b36742837300e14707d

Malware Config
Targets
Target

eb3b4267.bin

MD5

fe5b9802204418aa5238c4d2a16d799c

Filesize

2MB

Score
10 /10
SHA1

eaf47425d900150ceb5f0e88e5e7d08e4634bb20

SHA256

0f170f04c03a6aeb1b60fc29b053fcc981de9229f0aa60ddf7988d3bb3167c23

SHA512

98d6aa61d479adec304b63b9fb07e611767f7f27d3fb2cf267895264100d6d2c4cde92803be9a9216990df9962ebdf84eb39986da7115b36742837300e14707d

Tags

Signatures

  • NetSupport

    Description

    NetSupport is a remote access tool sold as a legitimate system administration software.

    Tags

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  • JavaScript code in executable

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10