Overview

overview

10

Static

static

3

Documents/file.exe

windows10-2004-x64

10

Documents/file.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Documents.zip

  • Size

    2.1MB

  • Sample

    240719-cw1qgaycmm

  • MD5

    06621638fa9e9e0bab2d7716fe73ce1f

  • SHA1

    7848a11d6eead901a3fe8b2a0927b15fdeebd773

  • SHA256

    d4025479d903bf24edf0cda8f9152f434dc7221802623091e92de903a2aedc95

  • SHA512

    d5123ea00bae41e0231a759b8812b78136aa01f5d9b923496244495b49e28657cb8d0c6e49997190c2497cde9857b0eff54606aea9723cf28ca85453aa826a17

  • SSDEEP

    49152:wjW0xxgYrp7TVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK023K8mWLawS6T:wqGeSzENOzeuAGrXnF6uolAF4oT

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      Documents/file.exe

    • Size

      54KB

    • MD5

      443d48f993d073c0f7027ce386ddb862

    • SHA1

      7c947415d46f55291267c3e1fa47a797a3503aa6

    • SHA256

      b2ada18bbaf798c8a641df5b0ff1b48006f6029ccb9c5a529d91673367de3e35

    • SHA512

      8abf630ddecf9ebab1196bbc9c87f1004c5d58ef576b5f1d08b6316f06ba55d78edffdec6d6676ddd1ba27ff1e7fa8a6ac2c1fb659e0dd0b2c4989a59c711e05

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opgca2:lImfzoXK9/o6w

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks