General
- Target update_17_06_2024_5767063.msix
- Size 5.7MB
- Sample240623-yl3yqstdln
- SHA256 08d4a681aadff5681947514509c1f2af10ff8161950df2ae7f8ee214213edc17
- MD5 8ccf6e48807afdf1ae0304fddaa232c8
- SHA1 8f9f24a7856de7845f8bd3a389182fd3847f1298
- SHA512 b416abb388f20242de28e152c27c709bc64e1c81b781e8dc3159c75006249131461048a6cb6c22e8fb7b604927180445db7b07a3bfc2ff9a50ec1fa017c2d7e3
- SSDEEP 98304:1prM2Fn76yeCJMAeAbIqwRhDKb9h6R4I7Ow6EQJ2wfWpQ8kjHcgWLSzYr0:7PF+yeCiANILRhDKBhEJ7RRQJ2wfKsHl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
update_17_06_2024_5767063.appx
Resource
win10-20240404-en
0 signatures
1200 seconds
Behavioral task
behavioral2
Sample
update_17_06_2024_5767063.appx
Resource
win10v2004-20240508-en
13 signatures
1200 seconds
Behavioral task
behavioral3
Sample
update_17_06_2024_5767063.appx
Resource
win11-20240611-en
0 signatures
1200 seconds
Malware Config
Targets
-
- Target update_17_06_2024_5767063.msix
- Size 5.7MB
- SHA256 08d4a681aadff5681947514509c1f2af10ff8161950df2ae7f8ee214213edc17
- MD5 8ccf6e48807afdf1ae0304fddaa232c8
- SHA1 8f9f24a7856de7845f8bd3a389182fd3847f1298
- SHA512 b416abb388f20242de28e152c27c709bc64e1c81b781e8dc3159c75006249131461048a6cb6c22e8fb7b604927180445db7b07a3bfc2ff9a50ec1fa017c2d7e3
- SSDEEP 98304:1prM2Fn76yeCJMAeAbIqwRhDKb9h6R4I7Ow6EQJ2wfWpQ8kjHcgWLSzYr0:7PF+yeCiANILRhDKBhEJ7RRQJ2wfKsHl
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-
Executes dropped EXE
-
Loads dropped DLL