General
-
Target
359dc605a71b25b69d2e7673202c79c2.exe
-
Size
2.1MB
-
Sample
230326-klez1shh5z
-
MD5
359dc605a71b25b69d2e7673202c79c2
-
SHA1
e915fd1a5f8483991069cc41abf872489faa7a19
-
SHA256
12cda2b4c69e83ff66a7e583597e6182cc95211c305829b586301906e6351949
-
SHA512
679cdcbaefd73ed866e9e1c8650a8922544acc530c7db792d23bda086d040f35c9665736f1b8d4efbf4456213dec3468a330350bcfcd1acef8810ace0764f3a3
-
SSDEEP
49152:tt6iaPw71zyI2im0OoGZ3/uHOo8PWVjnJEZGVuuRkKsN/CrgjNQ:tt6iaPw71zP2ib7TaW7EZGUQvsAONQ
Static task
static1
Behavioral task
behavioral1
Sample
359dc605a71b25b69d2e7673202c79c2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
359dc605a71b25b69d2e7673202c79c2.exe
Resource
win10v2004-20230221-en
Malware Config
Targets
-
-
Target
359dc605a71b25b69d2e7673202c79c2.exe
-
Size
2.1MB
-
MD5
359dc605a71b25b69d2e7673202c79c2
-
SHA1
e915fd1a5f8483991069cc41abf872489faa7a19
-
SHA256
12cda2b4c69e83ff66a7e583597e6182cc95211c305829b586301906e6351949
-
SHA512
679cdcbaefd73ed866e9e1c8650a8922544acc530c7db792d23bda086d040f35c9665736f1b8d4efbf4456213dec3468a330350bcfcd1acef8810ace0764f3a3
-
SSDEEP
49152:tt6iaPw71zyI2im0OoGZ3/uHOo8PWVjnJEZGVuuRkKsN/CrgjNQ:tt6iaPw71zP2ib7TaW7EZGUQvsAONQ
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-