General
- Target netsupport25.zip
- Size 2.2MB
- Sample240424-sp8eqscc62
- SHA256 7441c425b0ec105239414af3341a42a5d0f9d4fd9495db03d48746d9914ab438
- MD5 d9b6c10970b94d21e3f2077b54a63818
- SHA1 98f404cb5ce1d0d90a56f20377df3861f2164c25
- SHA512 c24bbff0a5928c8679a7e2f09457ce4fc56dfa31fa02c9c8fee16ffb1d287805956ab70c373f58713cf85d1ec0a477bc8ac793ff153ae8eb422b0b776c83ec4a
- SSDEEP 49152:x7VQNflTPMa/OxjJ1hQKa/ZK770FH244xSbBVLmLELJ6QWT:ZePMa/OxhF46YFH2HSbnCLQS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
client/client32.exe
Resource
win10-20240404-en
5 signatures
1800 seconds
Behavioral task
behavioral2
Sample
client/client32.exe
Resource
win10v2004-20240412-en
4 signatures
1800 seconds
Behavioral task
behavioral3
Sample
client/client32.exe
Resource
win11-20240412-en
5 signatures
1800 seconds
Malware Config
Targets
-
- Target client/client32.exe
- Size 54KB
- SHA256 1b63f83f06dbd9125a6983a36e0dbd64026bb4f535e97c5df67c1563d91eff89
- MD5 9497aece91e1ccc495ca26ae284600b9
- SHA1 a005d8ce0c1ea8901c1b4ea86c40f4925bd2c6da
- SHA512 4c892e5029a707bcf73b85ac110d8078cb273632b68637e9b296a7474ab0202320ff24cf6206de04af08abf087654b0d80cbecfae824c06616c47ce93f0929c9
- SSDEEP 1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opgRl2:lImfzoXK9/o66
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.