Overview

overview

10

Static

static

1

HTCTL32.dll

windows7-x64

3

HTCTL32.dll

windows10-2004-x64

3

PCICHEK.dll

windows7-x64

1

PCICHEK.dll

windows10-2004-x64

1

PCICL32.dll

windows7-x64

1

PCICL32.dll

windows10-2004-x64

1

TCCTL32.dll

windows7-x64

1

TCCTL32.dll

windows10-2004-x64

1

msvcr100.dll

windows7-x64

3

msvcr100.dll

windows10-2004-x64

3

pcicapi.dll

windows7-x64

1

pcicapi.dll

windows10-2004-x64

1

remcmdstub.exe

windows7-x64

1

remcmdstub.exe

windows10-2004-x64

1

trinity.exe

windows7-x64

10

trinity.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    16012024_0029_AudioHiRes.zip
  • Size 2.1MB
  • Sample240115-tzdtjsbbfn
  • SHA256 ec7a238fda45b8b63d51ee708a2617aa9d04740e4ba9e5fc12d13884508ba2b1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
netsupportrat

Malware Config

Targets

    • Target
      HTCTL32.DLL
    • Size 320KB
    • SHA256 edfe2b923bfb5d1088de1611401f5c35ece91581e71503a5631647ac51f7d796
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral1behavioral2
    • Target
      PCICHEK.DLL
    • Size 18KB
    • SHA256 313117e723dda6ea3911faacd23f4405003fb651c73de8deff10b9eb5b4a058a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3behavioral4
    • Target
      PCICL32.DLL
    • Size 3.6MB
    • SHA256 63aa18c32af7144156e7ee2d5ba0fa4f5872a7deb56894f6f96505cbc9afe6f8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      TCCTL32.DLL
    • Size 387KB
    • SHA256 6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8
    • Target
      msvcr100.dll
    • Size 755KB
    • SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10behavioral9
    • Target
      pcicapi.dll
    • Size 32KB
    • SHA256 9074fd40ea6a0caa892e6361a6a4e834c2e51e6e98d1ffcda7a9a537594a6917
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral11behavioral12
    • Target
      remcmdstub.exe
    • Size 53KB
    • SHA256 577927563589c3c9d05c510bce5f3cd9a55ea1de155e50e87c066bbff290a6fe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13behavioral14
    • Target
      trinity.exe
    • Size 103KB
    • SHA256 49a568f8ac11173e3a0d76cff6bc1d4b9bdf2c35c6d8570177422f142dcfdbe3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral15behavioral16

MITRE ATT&CK Matrix

Tasks