Overview

overview

10

Static

static

778740fde9...9a.exe

windows7_x64

10

778740fde9...9a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    778740fde9b90b9dba00950061087e9a.exe

  • Size

    3.2MB

  • Sample

    210507-8sy6x1pvyj

  • MD5

    778740fde9b90b9dba00950061087e9a

  • SHA1

    a2b0d310fe8acb98d21ab9ffb7dac7cdcedf5348

  • SHA256

    01910bddacbf2ea878b487dd3dfc2cfbeabf1a3dba94309b4a84c9e6b4b4afc9

  • SHA512

    1fb987544a2031b45e659b9f87fbea2d437c96e64748d02d856b014aa952bced4514119a7e97d19511423765e8eef30765c7ee5f3768f464bb95c2404bf046b5

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      778740fde9b90b9dba00950061087e9a.exe

    • Size

      3.2MB

    • MD5

      778740fde9b90b9dba00950061087e9a

    • SHA1

      a2b0d310fe8acb98d21ab9ffb7dac7cdcedf5348

    • SHA256

      01910bddacbf2ea878b487dd3dfc2cfbeabf1a3dba94309b4a84c9e6b4b4afc9

    • SHA512

      1fb987544a2031b45e659b9f87fbea2d437c96e64748d02d856b014aa952bced4514119a7e97d19511423765e8eef30765c7ee5f3768f464bb95c2404bf046b5

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks