Extracted

Extracted

• • Target

    notepad6008.js

  • Size

    47KB

  • MD5

    beb1f09e361aaa18598150c6ca4bc7f0

  • SHA1

    220f35d5ec1b28c25b41a8f213d81069f538acf1

  • SHA256

    2e7c06e3cf60da0c6c3f09a015aba51456aa68242cce644df3de822c0b6471fa

  • SHA512

    76b1552327584a815f49db746def0c1c3c9a19fab73fb081842f8e2569c5fff33554afe0748d69a821af5aede9648981cc064dc33bf739e399a10c875201e02f

  • SSDEEP

    768:/x3TYkjZaObfuti8LR9+7ehNQdPeM63ryKhX/fbDcRF1PQ:/5TjIOjutB99+4NQdPeM63mKZbgNo

  Score

  10^/10

  netsupportrat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2