Overview

overview

10

Static

static

3

RecyclBin/user.exe

windows10-1703-x64

10

RecyclBin/user.exe

windows10-2004-x64

10

RecyclBin/user.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RecyclBin.zip

  • Size

    2.1MB

  • Sample

    240625-ne23razbrn

  • MD5

    04be99a104bd79936e935c5fdf261d36

  • SHA1

    76bb22f13f548d5de32f6f887d9187c6c2e4beab

  • SHA256

    a0e69b71a1de41dbbdc3ac7942eabaf4e48327229171a7c4ddccf50ae9a92fb1

  • SHA512

    135c5d2a733ec745bea356a3e04eb80ad6518e5eeb6a3d5e0a4d61f26c552ce59d29bb270e9e891d638d12b5712505006d2c2ff5084682f39dd7757cafd27725

  • SSDEEP

    49152:qjW0xx9Yrp7JVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02Cb8mWLawS61:qqGXSNENOzeuAGrXnF6uold44o1

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      RecyclBin/user.exe

    • Size

      54KB

    • MD5

      840e863f3c99ec63155bcb043ae53466

    • SHA1

      f6eefa77dbb37d088654e8149cd3accdca190afa

    • SHA256

      7a2939ea1f3b04ba6a726ad5c957cf0d82c757f870422b2ba3ec16f13914c8c0

    • SHA512

      154edaa954a8c27499c65f8ca39960511bdf3a41718a4f59277dcb820c0caeb49c144e9a444606305ae39749ce5501afcb001efdfb1ed96b73e328705fdb68c8

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opggt2:lImfzoXK9/o63

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks