Overview

overview

10

Static

static

1

wsj.appx

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wsj.msix

  • Size

    1.0MB

  • Sample

    240429-xjxs9saa35

  • MD5

    71335ecc86d6504b5f6456999539a951

  • SHA1

    757086717d21c9b6d5c20a497493dcd25c63e63f

  • SHA256

    50a5e6a357c841e6c2058ee658c70756da4b803f2a4f6d2cf96ab882a03a5294

  • SHA512

    23043daebeda61b4702b5e8a0d938bf74d3f61dab34452df964943d64f8a7161ded89455ef348af0ab48660644df854b9132b8d0eef97453cdfd02fc1d48db6d

  • SSDEEP

    24576:GEnGpZC0OG9vMc/FkyOgnoQce6XBdi+J72ihgnW:G/pkRG99/FkyFKeiB8+J71mW

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      wsj.msix

    • Size

      1.0MB

    • MD5

      71335ecc86d6504b5f6456999539a951

    • SHA1

      757086717d21c9b6d5c20a497493dcd25c63e63f

    • SHA256

      50a5e6a357c841e6c2058ee658c70756da4b803f2a4f6d2cf96ab882a03a5294

    • SHA512

      23043daebeda61b4702b5e8a0d938bf74d3f61dab34452df964943d64f8a7161ded89455ef348af0ab48660644df854b9132b8d0eef97453cdfd02fc1d48db6d

    • SSDEEP

      24576:GEnGpZC0OG9vMc/FkyOgnoQce6XBdi+J72ihgnW:G/pkRG99/FkyFKeiB8+J71mW

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks