Extracted

• • Target
    Update_browser_121.0.616.js
  • Size 141KB
  • SHA256 17c662fa6ded7645b08556f493d9f608aca1471b3272fe90890912a9181b0706
  • MD5 df3ad4e65f0513dea0c621f0311bf936
  • SHA1 9489405b084cd9310f649de7bac998a15597d9f4
  • SHA512 0101b74a3fe9907192de9c390f40a258d37d77af6a3bdc7a2d6f2eb9284f1dc12c70a3adb8c8e48139c9b64fab0c97e38a2dd66f9a0d841ae9a465ce94d0daf4
  • SSDEEP 1536:HOpyD12CUUtsOpyD12CUUtEsOpyD12CUUtS:HOpyDEXUtsOpyDEXUt3OpyDEXUtS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  netsupportpersistencerat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1