netsupport

Sharing

Copy URL Twitter E-mail

General

Target
10012024_2345_ReactionCr.zip
Size 4.8MB
Sample240110-s7ev5sbbe4
SHA256 2ceb5c5638d720ba64f92ba8e5742aff5c2ed0b2a5571ecc5fef0a2ff9c93699
MD5 50e3b5199daaecaa707d57e1bf0f33af
SHA1 0b22d9313fcbf4cb3a52cf9ed061e42e83364228
SHA512 feac0f4d435257ac7935e2838cf83ba31f8e586fcfa1dad50d3a180410a1cfce39daeb37a5c22126d5eb35b84a1c5ec7b3b4aaca8ddf7857ffd50d4fad742948
SSDEEP 98304:kRqpWvMOOTUSTA5mEPENVtE/iGneS3R4qyNjYnU21PBT3eR2PdiK:ZW+UR59CE/ilS2F6ZT3eRU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

netsupport rat

Malware Config

Targets

- Target
  HTCTL32.DLL
- Size 320KB
- SHA256 edfe2b923bfb5d1088de1611401f5c35ece91581e71503a5631647ac51f7d796
- MD5 2d3b207c8a48148296156e5725426c7f
- SHA1 ad464eb7cf5c19c8a443ab5b590440b32dbc618f
- SHA512 55c791705993b83c9b26a8dbd545d7e149c42ee358ecece638128ee271e85b4fdbfd6fbae61d13533bf39ae752144e2cc2c5edcda955f18c37a785084db0860c
- SSDEEP 6144:2ib5YbsXPKXd6ppGpwpbGf30IVFpSzyaHx3/4aY5dUilQpAf84lH0JYBAnM1OK/Y:2ib5YbsXioEgULFpSzya9/lY5SilQCfg
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  PCICHEK.DLL
- Size 18KB
- SHA256 313117e723dda6ea3911faacd23f4405003fb651c73de8deff10b9eb5b4a058a
- MD5 a0b9388c5f18e27266a31f8c5765b263
- SHA1 906f7e94f841d464d4da144f7c858fa2160e36db
- SHA512 6051a0b22af135b4433474dc7c6f53fb1c06844d0a30ed596a3c6c80644df511b023e140c4878867fa2578c79695fac2eb303aea87c0ecfc15a4ad264bd0b3cd
- SSDEEP 192:1ANeiOT8Z2b6SoVF6RRHaPrpF3o47jtd3hfwHjvud3hfwx7bjuh:1ANt+E2exrpxTSDuTuih
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  PCICL32.DLL
- Size 3.6MB
- SHA256 63aa18c32af7144156e7ee2d5ba0fa4f5872a7deb56894f6f96505cbc9afe6f8
- MD5 00587238d16012152c2e951a087f2cc9
- SHA1 c4e27a43075ce993ff6bb033360af386b2fc58ff
- SHA512 637950a1f78d3f3d02c30a49a16e91cf3dfccc59104041876789bd7fdf9224d187209547766b91404c67319e13d1606da7cec397315495962cbf3e2ccd5f1226
- SSDEEP 49152:cTXNZ+0ci2aYNT8wstdAukudJ1xTvIZamclSp+73mPu:cTXNo0cpKwstTJIkS43mm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  TCCTL32.DLL
- Size 387KB
- SHA256 6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea
- MD5 eab603d12705752e3d268d86dff74ed4
- SHA1 01873977c871d3346d795cf7e3888685de9f0b16
- SHA512 77de0d9c93ccba967db70b280a85a770b3d8bea3b707b1abb037b2826b48898fec87924e1a6cce218c43478e5209e9eb9781051b4c3b450bea3cd27dbd32c7f3
- SSDEEP 12288:OpwbUb48Ju0LIFZB4Qaza4yFaMHAZtJ4Yew2j/bJa+neNQ:epq7BaGIn4BbLneNQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  mref.exe
- Size 103KB
- SHA256 49a568f8ac11173e3a0d76cff6bc1d4b9bdf2c35c6d8570177422f142dcfdbe3
- MD5 8d9709ff7d9c83bd376e01912c734f0a
- SHA1 e3c92713ce1d7eaa5e2b1fabeb06cdc0bb499294
- SHA512 042ad89ed2e15671f5df67766d11e1fa7ada8241d4513e7c8f0d77b983505d63ebfb39fefa590a2712b77d7024c04445390a8bf4999648f83dbab6b0f04eb2ee
- SSDEEP 384:qTjV5+6j6Qa86Fkv2Wr120hZIqeTSGRp2TkFimMP:qHVZl6FhWr80/heT8TkFiH
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

netsupport rat
- NetSupport
  NetSupport is a remote access tool sold as a legitimate system administration software.
  rat netsupport
behavioral10 behavioral9
- Target
  msedge.exe
- Size 3.7MB
- SHA256 c47fc20231ffc1e3befef952478363bff96cf3af1f36da4bd1129c8ed0e17fdb
- MD5 3c0325d48e517d0bc1a6870f2f581c47
- SHA1 546d6439dad71979e2a9c294526bc5f4d57075c1
- SHA512 61a27e74f0a62173750296eb75365448da3bd8c4f20c76e22a60f0633115f00ae600355faab28e9b2b10184a9d08b0c1c04eac5567caac79880f929eb6e25b65
- SSDEEP 49152:CvjTQQvqS3rHb0MzKPsrtn+Xb8hEB862I8HwCzAeW5pU4OD4gP69xKhWP2y/BG:E3rH3V+rFBBO+X24ONCPM
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  msedge_proxy.exe
- Size 1.2MB
- SHA256 02a81e87ee0a8b903a2bb71981f4b6ae6508e0dd69de698fba54b271571961fe
- MD5 c4168d0734c103cff81db3be79c83fc4
- SHA1 3d713b9edd3c7ff12d536c518959a89abd20a2ed
- SHA512 c05cd737979f97f52e3a3b44594f9b311d842532b7c1df60c0b385d41cdb36d376edeb2412f9da8156a4dfe2d92094d411d9aa2c858585271fafd2ead22343c5
- SSDEEP 12288:IsZYfaQK2PQT0Gc4orhjnR5QBQ1Uj3NVVJJsatmQu2X5xpTCnXCHUgICho+yTe25:UiQK2CmQu2Jxp8yHU7+2Fruqz1MgRr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  msvcr100.dll
- Size 755KB
- SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
- MD5 0e37fbfa79d349d672456923ec5fbbe3
- SHA1 4e880fc7625ccf8d9ca799d5b94ce2b1e7597335
- SHA512 2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630
- SSDEEP 12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  pcicapi.dll
- Size 32KB
- SHA256 9074fd40ea6a0caa892e6361a6a4e834c2e51e6e98d1ffcda7a9a537594a6917
- MD5 dcde2248d19c778a41aa165866dd52d0
- SHA1 7ec84be84fe23f0b0093b647538737e1f19ebb03
- SHA512 c5d170d420f1aeb9bcd606a282af6e8da04ae45c83d07faaacb73ff2e27f4188b09446ce508620124f6d9b447a40a23620cfb39b79f02b04bb9e513866352166
- SSDEEP 768:FFvNhAyi5hHA448qZkSn+EgT8To1iTYiu:FCyoHA448qSSzgI2GQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  pwahelper.exe
- Size 1.2MB
- SHA256 a6dcfcdbd1ae963bd874837b9da98fe5d05017e17f81e0dad146fe8be7ca1467
- MD5 fce23715a9e92f10ed2fecd33452fd2f
- SHA1 735a4e20f4e29a1957525910394ad0d485c52697
- SHA512 4063feff5d6be45c27a73aba91343b034546f72be724819668f7ffb818ea8083d8f52ff876f5f25c4ac0295a719eaa391a7610bc16fc375e876cb1676b31e1c4
- SSDEEP 12288:meSqyNJJqi2bO3bvZdyt1kLb1ZeqW0IfXBzPwwVKXP6vpUq46m4EqBCVI6Wc9xkK:trBzPw842pUi5CVIW9Gi
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  remcmdstub.exe
- Size 53KB
- SHA256 577927563589c3c9d05c510bce5f3cd9a55ea1de155e50e87c066bbff290a6fe
- MD5 fe8978aeac17836d0b99c3edb88de357
- SHA1 d7320274619baeb175855406d1027d02f845fb6c
- SHA512 68b6c647b40f071a602dcecd580232aca8434c7338837debda9d1ec37776415f680ac184ffb1497c93caa7353276d41d5df77538e004c1ffd168217df2cb5262
- SSDEEP 768:vehWO78043LHCTPQuw/T3cgCsMl2PLLW/bC:vAb43LuPQFTSl2PLaTC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22