Overview

overview

10

Static

static

1A44217A97...E7.exe

windows7_x64

10

1A44217A97...E7.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1A44217A97C294C528D5DA09590E64E7.exe
  • Size 2.0MB
  • Sample210616-6hxcnpfchn
  • SHA256 672eebccfb00a9a4cc11fec4232eff3c87f7870d1cef4c647d364801cab814ca
  • MD5 SHA1 SHA512
Score
10/10
netsupportrat

Malware Config

Targets

    • Target
      1A44217A97C294C528D5DA09590E64E7.exe
    • Size 2.0MB
    • SHA256 672eebccfb00a9a4cc11fec4232eff3c87f7870d1cef4c647d364801cab814ca
    • MD5 SHA1 SHA512
    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks