Overview

overview

10

Static

static

3

client32.exe

windows10-1703-x64

10

client32.exe

windows10-2004-x64

10

client32.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lol.zip

  • Size

    2.8MB

  • Sample

    240129-w35gsahfak

  • MD5

    db4d0ecc5810b6f5ca329c5f4b06b255

  • SHA1

    1cba18eaac4cd45c4ffb553d2eabc59ad53925d9

  • SHA256

    222fef366804cf3419855737cdf36e42e9105a43384750e9585aaf464bf4e259

  • SHA512

    d851b0c962128291641ba3b1014ae99bb5515b74d365498efd3f5a8e7aad90e6a3b76e442bd5e9fc14363a7b80e1e5b1aa82c9b58649cd6be88847513f8f4f65

  • SSDEEP

    49152:3lAQumelDlEDThXBJOhHLw6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gh:3l7/FXamhRFY89YYc9jh23redpmQRC1x

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      client32.exe

    • Size

      101KB

    • MD5

      c4f1b50e3111d29774f7525039ff7086

    • SHA1

      57539c95cba0986ec8df0fcdea433e7c71b724c6

    • SHA256

      18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d

    • SHA512

      005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5

    • SSDEEP

      768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks