General
- Target lol.zip
- Size 2.9MB
- Sample240122-t321jsbab6
- SHA256 8e2a24eecfecd42221eb8faeb5c5d4e2f047dbcb39cb7c401e09b97a9aa4fc7e
- MD5 c367c05ed4a8ff3042b441dad25ab9d7
- SHA1 79699f8641d78df818ada7b849717415ef583d01
- SHA512 8b7a5daeb8cefa8df632d91a5e2902edf7bfb31c1db9c1003cf77c159e3d38d6a1c174c82b542e9bd4f3b5a6571fb7952192a8356dd5797752b5ae62c8bee9ee
- SSDEEP 49152:3lAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gs:3l7/FXamhRFY89YYc9jh23redpmQRC18
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
client32.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
client32.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target client32.exe
- Size 101KB
- SHA256 18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d
- MD5 c4f1b50e3111d29774f7525039ff7086
- SHA1 57539c95cba0986ec8df0fcdea433e7c71b724c6
- SHA512 005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5
- SSDEEP 768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.