General
-
Target
ae63b342d6211f00ff9e256b1e2339b3.exe
-
Size
2.5MB
-
Sample
230327-2wn44sff99
-
MD5
ae63b342d6211f00ff9e256b1e2339b3
-
SHA1
f2cb5fef98dd61c96e79896bd9ee84f258f3e856
-
SHA256
64d3eef726267d18037a898e65f9a98aa609a37d6cda7762013f9362ef424dd6
-
SHA512
f35155e7fcae0f5a4e70856bac54eeaa398bafa7c8a95cd34fe7f31c4f07dfa719af1a6738f875f95eda8dd9ce02edfdc5ee9b7d67bb61f94fc78b71e9503f4e
-
SSDEEP
49152:xdoHdxkp92TMp2OSSyWi/TlV56nNeDyQ41Huw9If8DQtqKPi/VBK:id6Ugp24+6UyQ41uw9IkDUii
Static task
static1
Behavioral task
behavioral1
Sample
ae63b342d6211f00ff9e256b1e2339b3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ae63b342d6211f00ff9e256b1e2339b3.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
ae63b342d6211f00ff9e256b1e2339b3.exe
-
Size
2.5MB
-
MD5
ae63b342d6211f00ff9e256b1e2339b3
-
SHA1
f2cb5fef98dd61c96e79896bd9ee84f258f3e856
-
SHA256
64d3eef726267d18037a898e65f9a98aa609a37d6cda7762013f9362ef424dd6
-
SHA512
f35155e7fcae0f5a4e70856bac54eeaa398bafa7c8a95cd34fe7f31c4f07dfa719af1a6738f875f95eda8dd9ce02edfdc5ee9b7d67bb61f94fc78b71e9503f4e
-
SSDEEP
49152:xdoHdxkp92TMp2OSSyWi/TlV56nNeDyQ41Huw9If8DQtqKPi/VBK:id6Ugp24+6UyQ41uw9IkDUii
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-