Overview

overview

10

Static

static

1

update_21_...6.appx

windows10-1703-x64

update_21_...6.appx

windows10-2004-x64

10

update_21_...6.appx

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    update_21_06_2024_8007376.msix

  • Size

    5.7MB

  • Sample

    240623-ylx3gszepc

  • MD5

    cf0ee8a6c9012e71d181916641b2228d

  • SHA1

    029da267489f40b80f0f2096396f63ab0f692d58

  • SHA256

    3802c396e836de94ee13e38326b3fb937fcf0d6f6ef9ccdf77643be65de4c8ee

  • SHA512

    f161f286110c0ab643c901cbd30d2970b5d03081c59f2e741c2a30b871ba22359eb08a97f4601ea76f033f947e8e43118950398511d8582be6ceac0e122cd8a1

  • SSDEEP

    98304:6p2MdFnpfy/CJTAeAbIqLkh0Kboh6R4p8lw6tyJRwfWUmbyK82OCX36dSA1a:BsFty/CxANIUkh0KkhE88mcyJRwfjmbZ

Score
10/10
netsupportexecutionrat

Malware Config

Targets

    • Target

      update_21_06_2024_8007376.msix

    • Size

      5.7MB

    • MD5

      cf0ee8a6c9012e71d181916641b2228d

    • SHA1

      029da267489f40b80f0f2096396f63ab0f692d58

    • SHA256

      3802c396e836de94ee13e38326b3fb937fcf0d6f6ef9ccdf77643be65de4c8ee

    • SHA512

      f161f286110c0ab643c901cbd30d2970b5d03081c59f2e741c2a30b871ba22359eb08a97f4601ea76f033f947e8e43118950398511d8582be6ceac0e122cd8a1

    • SSDEEP

      98304:6p2MdFnpfy/CJTAeAbIqLkh0Kboh6R4p8lw6tyJRwfWUmbyK82OCX36dSA1a:BsFty/CxANIUkh0KkhE88mcyJRwfjmbZ

    Score
    10/10
    netsupportexecutionrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks