Overview

overview

10

Static

static

3

client32.exe

windows7-x64

10

client32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Jan.19.2024.zip

  • Size

    1.9MB

  • Sample

    240119-t8984saeh8

  • MD5

    d2ede88c0032165a6ca86705b5b6350e

  • SHA1

    06a1415570c78adb4966b3b63242764a8a5f0b11

  • SHA256

    6d4a140d0a7233f96b8d8ad145093edc7a5bf387690db9dca2a9c4ada3851182

  • SHA512

    0b0c44dfb47d2fa9d292d2145875cc57a688a2c7b7bbe9fabfa49bfe5e8b77a8f52d87d32472a8b09ce32581a75bdf1e6b116610ced9b130cef5168cae0ec2d4

  • SSDEEP

    49152:mfw1boon9EdfkKolvJEiARQp+Zs2FCFRc7VbFOaAa:mfebvkfT8ENs+RCXc7VbFpt

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      client32.exe

    • Size

      99KB

    • MD5

      aca274219070da800e92a8cae61235bc

    • SHA1

      7347b65bb6eaf0931220bb201c39a66206f0d2c4

    • SHA256

      21903b51f23f7af681a9f69aa066753b202af6c537b97a247d98cfbdec150d63

    • SHA512

      08df88938059e7324b755c3bc88d8943aaaf6f9244c748f521b265fd0417750e067cff077875d0168a440ad0b5fd3c1b0fa4dd5335bd707d4bf3b07e6c6ede2a

    • SSDEEP

      768:qHcHeEYjB9aFIrdXrY/TEqMVnYYEFwGxDrLabMiF:qHHF9qEGMVntqxUn

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks