General
- Target vib.zip
- Size 2.5MB
- Sample240109-ya6v9ahcel
- SHA256 fef8bdf50c19a012bfdc9da3f4ea4cab39075637ca527f24af79575007b2befe
- MD5 04b7dee186f7f78986d9152afe44ea67
- SHA1 022133edcd9af0f3d44812e82d5abc958c2b5ba1
- SHA512 a1ab12202e31946e0cba8046b4a529695dd473788d9649cf3186bbc129d663b864bef4c543b1ecca26123ee2845c19a6511b658113f1c79634f96af9d5ff1a44
- SSDEEP 49152:3lAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gc:3l7/FXamhRFY89YYc9jh23redpmQRC1M
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
client32.exe
Resource
win10-20231215-en
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
client32.exe
Resource
win10v2004-20231215-en
4 signatures
1800 seconds
Behavioral task
behavioral3
Sample
client32.exe
Resource
win11-20231215-en
3 signatures
1800 seconds
Malware Config
Targets
-
- Target client32.exe
- Size 101KB
- SHA256 18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d
- MD5 c4f1b50e3111d29774f7525039ff7086
- SHA1 57539c95cba0986ec8df0fcdea433e7c71b724c6
- SHA512 005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5
- SSDEEP 768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.