General

  • Target

    TwchinSetup-x86.msix

  • Size

    46.5MB

  • Sample

    230825-3ysezsff82

  • MD5

    0e8d41f8b3bbb4eb57c80d1cdcfdbe3c

  • SHA1

    8de4a0fe3a0abe406fcb9a51e5523125df57e469

  • SHA256

    d843357fee8f463e8235fe3e144db173d022a995e9cd8b721c7ed10966551d83

  • SHA512

    bf2dbd2720a533babb6754f896b1030f6ab8b5545b30fd271061c25b090c8a9ecde3370b33f744e6b293e6fd5b7831ce64e0651f41ecdfd84d1cfc64d1e1b116

  • SSDEEP

    786432:QEMMmVPoJoc5CzBMTYe2/g7DaiUrsa05zP3YPHk2mOH0AunxaCYWrc/7R8cNcGjv:QEM9VP2oc5Cd+Yb47eiUIa09KHk2maOc

Score
10/10

Malware Config

Targets

    • Target

      TwchinSetup-x86.msix

    • Size

      46.5MB

    • MD5

      0e8d41f8b3bbb4eb57c80d1cdcfdbe3c

    • SHA1

      8de4a0fe3a0abe406fcb9a51e5523125df57e469

    • SHA256

      d843357fee8f463e8235fe3e144db173d022a995e9cd8b721c7ed10966551d83

    • SHA512

      bf2dbd2720a533babb6754f896b1030f6ab8b5545b30fd271061c25b090c8a9ecde3370b33f744e6b293e6fd5b7831ce64e0651f41ecdfd84d1cfc64d1e1b116

    • SSDEEP

      786432:QEMMmVPoJoc5CzBMTYe2/g7DaiUrsa05zP3YPHk2mOH0AunxaCYWrc/7R8cNcGjv:QEM9VP2oc5Cd+Yb47eiUIa09KHk2maOc

    Score
    10/10
    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

MITRE ATT&CK Matrix

Tasks