Extracted

• • Target

    933861b75227a3f4727b5872fa9da1b049e420632f8a9198987e8bfbaf7da9e6_JC.js

  • Size

    37KB

  • MD5

    c15beea0035b0ac586f27895a29a04f4

  • SHA1

    937d9d8eaac5a6ef16ce8bcae4b084a3603a49a3

  • SHA256

    933861b75227a3f4727b5872fa9da1b049e420632f8a9198987e8bfbaf7da9e6

  • SHA512

    ecbf688b91157e375fff3fa0b6d001a80e69d1a11d9467f38dbcab08714f87564cfcbaf49ab8637010db2c2974b73f863f39856d10cd6275abd4f1873e0d0145

  • SSDEEP

    768:r4mmlLumMT+Sh5+nyZcUtu/tWnm8raemrwzyWM6j:0mmlLg7hdtwWnzraemrcMw

  Score

  10^/10

  persistencenetsupportrat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2