Overview

overview

10

Static

static

3

570c50236f...64.exe

windows7-x64

10

570c50236f...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    570c50236f5588d4e12bf9992cac018f4d477a1f65915db5c8eb3be2af08ba64.exe

  • Size

    2.1MB

  • Sample

    231205-va9elada67

  • MD5

    7862c44fee7e4c821571f55685139063

  • SHA1

    0cd277184838a149724873f423983f32dd853910

  • SHA256

    570c50236f5588d4e12bf9992cac018f4d477a1f65915db5c8eb3be2af08ba64

  • SHA512

    ff58d51c3ec1daa1425297edea45bef43ad45f6bb667380f4f94405851301eac338746f5f103ad53b87fa14b54b6bf84464131209ee194fd6561a02be36ec5ea

  • SSDEEP

    49152:B1UOnVj3g0nSdZ/ufvr7TE22qqpE+OVbbk+LUqxNoWeJqEjXG:BtZ3HSd9ufD+B0Y+IrzqAG

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      570c50236f5588d4e12bf9992cac018f4d477a1f65915db5c8eb3be2af08ba64.exe

    • Size

      2.1MB

    • MD5

      7862c44fee7e4c821571f55685139063

    • SHA1

      0cd277184838a149724873f423983f32dd853910

    • SHA256

      570c50236f5588d4e12bf9992cac018f4d477a1f65915db5c8eb3be2af08ba64

    • SHA512

      ff58d51c3ec1daa1425297edea45bef43ad45f6bb667380f4f94405851301eac338746f5f103ad53b87fa14b54b6bf84464131209ee194fd6561a02be36ec5ea

    • SSDEEP

      49152:B1UOnVj3g0nSdZ/ufvr7TE22qqpE+OVbbk+LUqxNoWeJqEjXG:BtZ3HSd9ufD+B0Y+IrzqAG

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks