Overview

overview

10

Static

static

1

localer-en.hta

windows7-x64

3

localer-en.hta

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    localer-en.hta

  • Size

    1.1MB

  • Sample

    230825-ydhylaee26

  • MD5

    674e3c0ae0f2627c10b58a717ee093bd

  • SHA1

    21f15d58046119712572a5114b781027c99f7bc4

  • SHA256

    b5f52078915dbe23dcb847e7badd546e1325403e56694ea624aac39c68d6f985

  • SHA512

    4d6444d49befa990756aa4e668ac6b664b4bdd1b19bf3914afe067ed0ed0d6ee6e34a114e0a47d1363bcf588b307f032b3c0638620385f02d12583f1706d37ef

  • SSDEEP

    1536:7pLwiizmnY5q7O2Db9L1/j/SFBOWrhRxPNahQo8y8Im+lIWFT5YhmFfON/H8P2c0:7ppizmnYs7Og9LNjaH1rhRxPNahYYPs

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      localer-en.hta

    • Size

      1.1MB

    • MD5

      674e3c0ae0f2627c10b58a717ee093bd

    • SHA1

      21f15d58046119712572a5114b781027c99f7bc4

    • SHA256

      b5f52078915dbe23dcb847e7badd546e1325403e56694ea624aac39c68d6f985

    • SHA512

      4d6444d49befa990756aa4e668ac6b664b4bdd1b19bf3914afe067ed0ed0d6ee6e34a114e0a47d1363bcf588b307f032b3c0638620385f02d12583f1706d37ef

    • SSDEEP

      1536:7pLwiizmnY5q7O2Db9L1/j/SFBOWrhRxPNahQo8y8Im+lIWFT5YhmFfON/H8P2c0:7ppizmnYs7Og9LNjaH1rhRxPNahYYPs

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks