Extracted

• • Target

    OwJViJVcVDtGwyBrPZixBrwr.ps1

  • Size

    5KB

  • MD5

    48ec3b15711ce5f49ee79e8cbf8c0f1f

  • SHA1

    9d263753c22d21681fbde1bda539beee56ded769

  • SHA256

    9a4e39fcb4033a9c849890085b67faea7265eaf56744e77aa8180b1834b7e14a

  • SHA512

    61f7696e8c0dcf59e354fcbbdaa0aa0845a2b2d02d3762a7410a83cb211db87d571dea95308db54aaf060189627dbe4785ee951a28a7ba152e973555424d808e

  • SSDEEP

    96:0NNYJo13C6KjlHHCiGqPaHPgfnRk+qPIKsO1ezfgmwqPoase1ejvysKEO1ezfgmX:8Oo1NKjNwqPaHPgfnR7qPIKsO1dbqPoX

  Score

  10^/10

  netsupportrat

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

    ratnetsupport

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2behavioral3behavioral4