Extracted

• • Target

    Update_browser_121.0.616.js

  • Size

    141KB

  • MD5

    df3ad4e65f0513dea0c621f0311bf936

  • SHA1

    9489405b084cd9310f649de7bac998a15597d9f4

  • SHA256

    17c662fa6ded7645b08556f493d9f608aca1471b3272fe90890912a9181b0706

  • SHA512

    0101b74a3fe9907192de9c390f40a258d37d77af6a3bdc7a2d6f2eb9284f1dc12c70a3adb8c8e48139c9b64fab0c97e38a2dd66f9a0d841ae9a465ce94d0daf4

  • SSDEEP

    1536:HOpyD12CUUtsOpyD12CUUtEsOpyD12CUUtS:HOpyDEXUtsOpyDEXUt3OpyDEXUtS

  Score

  10^/10

  netsupportpersistencerat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1