General
-
Target
ah.zip
-
Size
7.0MB
-
Sample
240528-m5c1wagd7x
-
MD5
777c025958c2dd332ae1163092305f54
-
SHA1
ec016614bbbe6e88dc4e58e26a9d88bf4d1a3a64
-
SHA256
36a00c545e5fdbd5712eb468099a211dccf17812a0cb08efde9d3ddce7181c5e
-
SHA512
7ab95cde168fa9e866d7841729cfd4a51b3b1406cf1c808271297f7875309541fec7e0d5d7f7e0a76c7b5e0ce5e795321dfcb729208283ecd311dc0563bb920f
-
SSDEEP
196608:Z8oDmWKq7cLCueSB4lE71V/YxQtw44B2yZIgrgI:6n+SWW2Otw4hyuWH
Static task
static1
Behavioral task
behavioral1
Sample
ah.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ah.zip
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
ForceCPU.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
ForceCPU.exe
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
ah.zip
-
Size
7.0MB
-
MD5
777c025958c2dd332ae1163092305f54
-
SHA1
ec016614bbbe6e88dc4e58e26a9d88bf4d1a3a64
-
SHA256
36a00c545e5fdbd5712eb468099a211dccf17812a0cb08efde9d3ddce7181c5e
-
SHA512
7ab95cde168fa9e866d7841729cfd4a51b3b1406cf1c808271297f7875309541fec7e0d5d7f7e0a76c7b5e0ce5e795321dfcb729208283ecd311dc0563bb920f
-
SSDEEP
196608:Z8oDmWKq7cLCueSB4lE71V/YxQtw44B2yZIgrgI:6n+SWW2Otw4hyuWH
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-
-
-
Target
ForceCPU.exe
-
Size
19KB
-
MD5
b982a103b0d4e0db856026a163124bf3
-
SHA1
40772be00068bbd394ff0fccd551151a822f3e70
-
SHA256
2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d
-
SHA512
214ecdf348e2093e91a489c0541f05eb3356e2531c1840a99d9f727caf1130f5041ccbc6356a7bc31fb4dece927d3fee2fa9e4689d2badbe680fd40104a9d327
-
SSDEEP
192:fHtIemmfltxD5WLtWwiyT5hNGnYe+PjPxucwwyibSucwwQJk35H0JOqxEV1a//bG:xD5WLZ5qnYPLxoDfoDg+JNY1cAhhv
Score1/10 -