General

  • Target

    netsupport.zip

  • Size

    2.1MB

  • MD5

    3412f3bc103507ecae83d29649a8c167

  • SHA1

    f2f4f9efcc69639d0b9c8af00182d24d786e18cc

  • SHA256

    c2b2beab41e8e9b9e969a08c47aa8184a5e1c038872a1a935ee9e720843aa261

  • SHA512

    566c092c466191a25e3ee822af37360be83e6e4c064e5a7990e1c1a916dcea2ed3f38db6c692dfe23631c85264d1262ae17c632752de97d69b01b99200bff2c9

  • SSDEEP

    49152:ZZ80qr8GFwvc8ms3Z3M7yi4lV6i8lZQdbsmatyRbcT9:P8DHyvpN+0B8lZks3k1cT9

Score
1/10

Malware Config

Signatures

Files

  • netsupport.zip
    .zip

    Password: infected

  • SophosSamples.zip
    .zip
  • BtYlWNJ95s06\HTCTL32.DLL
    .dll windows x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\NSM.LIC
  • BtYlWNJ95s06\NSM.ini
  • BtYlWNJ95s06\PCICHEK.DLL
    .dll windows x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\PCICL32.DLL
    .dll windows x86

    e88a5043d77a82981daefac5a519917e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\TCCTL32.DLL
    .dll windows x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\client32.ini
  • BtYlWNJ95s06\msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\nskbfltr.inf
  • BtYlWNJ95s06\pcicapi.dll
    .dll windows x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BtYlWNJ95s06\remcmdstub.exe
    .exe windows x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • BtYlWNJ95s06\whost.exe
    .exe windows x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections