Extracted

Extracted

• • Target

    2630f2b7d180fa8a7a9215e2708fca3d1ec242ddea747720cb31ed312281dfb3.js

  • Size

    56KB

  • MD5

    aecbd73b9075ed0d7c16ca516c648717

  • SHA1

    0c7fd08d11aff29aa5e56895b735b1f6ef7d7497

  • SHA256

    2630f2b7d180fa8a7a9215e2708fca3d1ec242ddea747720cb31ed312281dfb3

  • SHA512

    061ec8e06d7f5b48bf2d2954303437ba157edfa72484ceb5bd0f9137db3e4d22fcf7ae96a0ac07e3e7c90b8e2ff49e14e41b84037a35a21c780be37030ec281a

  • SSDEEP

    1536:hIlx3Gj1J6Nf/7KLLkQPefJ/yteahfOczrTY0FyzkqAWz+Pj:Rz8f/7KPXeB/OeahVzrTY0Fyzkqxz2j

  Score

  10^/10

  netsupportrat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2