Overview

overview

10

Static

static

eb3b4267.bin.exe

windows7_x64

10

eb3b4267.bin.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb3b4267.bin

  • Size

    2.1MB

  • Sample

    201029-fapk5yzxja

  • MD5

    fe5b9802204418aa5238c4d2a16d799c

  • SHA1

    eaf47425d900150ceb5f0e88e5e7d08e4634bb20

  • SHA256

    0f170f04c03a6aeb1b60fc29b053fcc981de9229f0aa60ddf7988d3bb3167c23

  • SHA512

    98d6aa61d479adec304b63b9fb07e611767f7f27d3fb2cf267895264100d6d2c4cde92803be9a9216990df9962ebdf84eb39986da7115b36742837300e14707d

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      eb3b4267.bin

    • Size

      2.1MB

    • MD5

      fe5b9802204418aa5238c4d2a16d799c

    • SHA1

      eaf47425d900150ceb5f0e88e5e7d08e4634bb20

    • SHA256

      0f170f04c03a6aeb1b60fc29b053fcc981de9229f0aa60ddf7988d3bb3167c23

    • SHA512

      98d6aa61d479adec304b63b9fb07e611767f7f27d3fb2cf267895264100d6d2c4cde92803be9a9216990df9962ebdf84eb39986da7115b36742837300e14707d

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks