Resubmissions
29/06/2024, 23:51
240629-3v89bstaqn129/06/2024, 23:50
240629-3vnbvszbrf1029/06/2024, 23:44
240629-3q9paszbld129/06/2024, 23:38
240629-3my4dsshlp26/09/2023, 13:19
230926-qknhnahe4s10Analysis
- max time kernel
122s - max time network
121s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
- submitted
29/06/2024, 23:50
General
- Target client32.exe
- Size 99KB
- Sample240629-3vnbvszbrf
- SHA256 213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897
Score
10/10
Malware Config
Signatures
- NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\client32.exe"C:\Users\Admin\AppData\Local\Temp\client32.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow