Overview

overview

10

Static

static

1

client32.exe

windows7-x64

10

client32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    decoded-1.zip

  • Size

    2.4MB

  • Sample

    231226-v5l8jsbff9

  • MD5

    a31438c0f7229772fe62ad9dc467028e

  • SHA1

    ab95829a1e5aa0527eaf582ed65792cd8529b270

  • SHA256

    94edaf5fc111ac29887fd54ad291ba7d387fcc7644dd5fe65a2e3857c35ad8e0

  • SHA512

    f97e10289d7572164db35294aac17668d83431c6a08f785f723811bea31f9d6b8a0a64ae52a2fd9d809a345809b94d12c943cc0fcb466deebdd3c5f8fb49d355

  • SSDEEP

    49152:JlAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/pG:Jl7/FXamhRFY89YYc9jh23redpmQRe19

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      client32.exe

    • Size

      101KB

    • MD5

      c4f1b50e3111d29774f7525039ff7086

    • SHA1

      57539c95cba0986ec8df0fcdea433e7c71b724c6

    • SHA256

      18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d

    • SHA512

      005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5

    • SSDEEP

      768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks