Overview

overview

10

Static

static

3

User/client32.exe

windows10-1703-x64

10

User/client32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    User.zip

  • Size

    2.1MB

  • Sample

    240624-b2bg4axbnm

  • MD5

    7edb35c407917c9528d8a488cdc26477

  • SHA1

    50c6058ed2c35c488e05753f347c5c3dd584ea18

  • SHA256

    0394ea89123da4336cd37ee040311c5658bbcfc85e2943bd21a448e5dcfe8dd3

  • SHA512

    f4061a10e65f45063b8c0491506fcf6762e392f6e00425e29891085c99dd93350a49a3f8bc3cde698b7b65cdd31a6610ac08a762f44992d6a186170c7b90f467

  • SSDEEP

    49152:UjW0xxWYrp7nVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02rO8mWLawS6b:UqGsSPENOzeuAGrXnF6uolKh4ob

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      User/client32.exe

    • Size

      54KB

    • MD5

      0390d6c23eb9001759fc654ad8b91a1d

    • SHA1

      30a485118e69f66c0dce1d656b5b366f62eb638c

    • SHA256

      1dfc715e9f4c9d0dd16b23f9d4d289aa9961b1781273aef11721a8543f348711

    • SHA512

      dadfa7656d070e724319303f8b9c67a5fc8d64f0e4ecc460c03ac0bad9aee9c5f3e5dc5859f665a3a7ad3d2b783755eb5b89a04f824c6ec0629405d428cc35a9

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opgtg2:lImfzoXK9/o6D

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks