Overview

overview

10

Static

static

1

54ef9fa70e...c6.exe

windows7-x64

10

54ef9fa70e...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54ef9fa70e329cdbe55dfccaef21f9c6.exe

  • Size

    2.6MB

  • Sample

    230225-3et5gaeg4y

  • MD5

    54ef9fa70e329cdbe55dfccaef21f9c6

  • SHA1

    697da7932e7b7388c9eb838c10c1856b000cdca8

  • SHA256

    8ccff473270017f72b0910ea0404d670cc6c0ebee16977accc7cbcf137ba168b

  • SHA512

    c4e2f1afa4920abeace123c76729f14ab6d078e5625868aaa628a35e1dec501bcf382e280015df1e67558662e929c029aa4116eb616522aff6c0ab051ae737b7

  • SSDEEP

    49152:5VvvvHIr4Ui00kCOEVB1v5iwc6wMdIpFE/pp:5Vngry00K8B5i2IpFwp

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      54ef9fa70e329cdbe55dfccaef21f9c6.exe

    • Size

      2.6MB

    • MD5

      54ef9fa70e329cdbe55dfccaef21f9c6

    • SHA1

      697da7932e7b7388c9eb838c10c1856b000cdca8

    • SHA256

      8ccff473270017f72b0910ea0404d670cc6c0ebee16977accc7cbcf137ba168b

    • SHA512

      c4e2f1afa4920abeace123c76729f14ab6d078e5625868aaa628a35e1dec501bcf382e280015df1e67558662e929c029aa4116eb616522aff6c0ab051ae737b7

    • SSDEEP

      49152:5VvvvHIr4Ui00kCOEVB1v5iwc6wMdIpFE/pp:5Vngry00K8B5i2IpFwp

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.