Overview

overview

10

Static

static

3

client32.exe

windows10-1703-x64

10

client32.exe

windows10-2004-x64

10

client32.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lol.zip

  • Size

    2.9MB

  • Sample

    240122-t4hy3abac8

  • MD5

    c367c05ed4a8ff3042b441dad25ab9d7

  • SHA1

    79699f8641d78df818ada7b849717415ef583d01

  • SHA256

    8e2a24eecfecd42221eb8faeb5c5d4e2f047dbcb39cb7c401e09b97a9aa4fc7e

  • SHA512

    8b7a5daeb8cefa8df632d91a5e2902edf7bfb31c1db9c1003cf77c159e3d38d6a1c174c82b542e9bd4f3b5a6571fb7952192a8356dd5797752b5ae62c8bee9ee

  • SSDEEP

    49152:3lAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gs:3l7/FXamhRFY89YYc9jh23redpmQRC18

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      client32.exe

    • Size

      101KB

    • MD5

      c4f1b50e3111d29774f7525039ff7086

    • SHA1

      57539c95cba0986ec8df0fcdea433e7c71b724c6

    • SHA256

      18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d

    • SHA512

      005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5

    • SSDEEP

      768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks