Overview

overview

10

Static

static

3

user.exe

windows10-1703-x64

10

user.exe

windows10-2004-x64

10

user.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RecyclBin.zip

  • Size

    2.1MB

  • Sample

    240625-da2lbaxamc

  • MD5

    1d68a7114450af5a9d49903ad083213a

  • SHA1

    ed07f791bf46de7e33a1d3ea71d2fe5b2e36018a

  • SHA256

    e19348885f427b4b959f1c075f19f351d90be6969e42fd7f148e95c07c709e50

  • SHA512

    2e1ccf3ec98c4b6da2252b9c4760d4313f717b53ef34d77d79a6a0fa7ccb403b614912d7958fad58121a566c60288af4ab64d7d9c41156029d08572b9ac1b6fc

  • SSDEEP

    49152:wjW0xxLYrp7ZVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02gp8mWLawS6J:wqGhSNENOzeuAGrXnF6uolnC4oJ

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      user.exe

    • Size

      54KB

    • MD5

      840e863f3c99ec63155bcb043ae53466

    • SHA1

      f6eefa77dbb37d088654e8149cd3accdca190afa

    • SHA256

      7a2939ea1f3b04ba6a726ad5c957cf0d82c757f870422b2ba3ec16f13914c8c0

    • SHA512

      154edaa954a8c27499c65f8ca39960511bdf3a41718a4f59277dcb820c0caeb49c144e9a444606305ae39749ce5501afcb001efdfb1ed96b73e328705fdb68c8

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opggt2:lImfzoXK9/o63

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks