General
-
Target
vib.zip
-
Size
2.5MB
-
Sample
240109-ya6v9ahcel
-
MD5
04b7dee186f7f78986d9152afe44ea67
-
SHA1
022133edcd9af0f3d44812e82d5abc958c2b5ba1
-
SHA256
fef8bdf50c19a012bfdc9da3f4ea4cab39075637ca527f24af79575007b2befe
-
SHA512
a1ab12202e31946e0cba8046b4a529695dd473788d9649cf3186bbc129d663b864bef4c543b1ecca26123ee2845c19a6511b658113f1c79634f96af9d5ff1a44
-
SSDEEP
49152:3lAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gc:3l7/FXamhRFY89YYc9jh23redpmQRC1M
Malware Config
Targets
-
-
Target
client32.exe
-
Size
101KB
-
MD5
c4f1b50e3111d29774f7525039ff7086
-
SHA1
57539c95cba0986ec8df0fcdea433e7c71b724c6
-
SHA256
18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d
-
SHA512
005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5
-
SSDEEP
768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-