Overview

overview

10

Static

static

3

client/client32.exe

windows7-x64

10

client/client32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    client.zip

  • Size

    2.1MB

  • Sample

    240623-zm2mqsvdlm

  • MD5

    7947741935ae170d12ad859025430a4b

  • SHA1

    dfcfeaebd115f701ad014b34ec2387b5151d9bc1

  • SHA256

    3e5817d7427891a666b8ee9d3f4d2ece6d7fac972073215e2938b3d721731259

  • SHA512

    b28cc7318f9bb1881e4b2bf833badc524c08c8d610e3916f21855fa3779c5dedcd03cad71bdd4533a44963a2feca48a07a3ef67f055df456d9edc9647e39c09f

  • SSDEEP

    49152:+jW0xxUYrp7TVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK029s8mWLawS64:+qGOSbENOzeuAGrXnF6uolkj4o4

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      client/client32.exe

    • Size

      54KB

    • MD5

      0390d6c23eb9001759fc654ad8b91a1d

    • SHA1

      30a485118e69f66c0dce1d656b5b366f62eb638c

    • SHA256

      1dfc715e9f4c9d0dd16b23f9d4d289aa9961b1781273aef11721a8543f348711

    • SHA512

      dadfa7656d070e724319303f8b9c67a5fc8d64f0e4ecc460c03ac0bad9aee9c5f3e5dc5859f665a3a7ad3d2b783755eb5b89a04f824c6ec0629405d428cc35a9

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opgtg2:lImfzoXK9/o6D

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks