Overview

overview

10

Static

static

3

Txn_Detail...df.exe

windows10-1703-x64

10

Txn_Detail...df.exe

windows10-2004-x64

10

Txn_Detail...df.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Txn_Details_G0391408919268_pdf.exe

  • Size

    2.2MB

  • Sample

    240722-p3xzdaxgqa

  • MD5

    32dbb0134457cf3cc2eb9c7c4cba9dbf

  • SHA1

    05ecd289fb130427498c2e67e3d3750b330f416e

  • SHA256

    0ee2ba29a98cc1d7f865a9e7ae7fd4b69b6da4af7a30b55a5e5d915616ea0aac

  • SHA512

    11236da09ee6e97e71bd2b04cdd25dac2ab1b021a3f54f5761d25e5c6b42b78a8d0c1b6163214e19b4f79e14a4dc0d7f3b519687d9f4620c726664b72cde775b

  • SSDEEP

    49152:KBP1yXk3fQLThPJrwfRzrqLb6fCanBzx+mk1tjSJc:idy0vQLVPJr5LbCjt+my8Jc

Score
10/10
netsupportrat

Malware Config

Targets

    • Target

      Txn_Details_G0391408919268_pdf.exe

    • Size

      2.2MB

    • MD5

      32dbb0134457cf3cc2eb9c7c4cba9dbf

    • SHA1

      05ecd289fb130427498c2e67e3d3750b330f416e

    • SHA256

      0ee2ba29a98cc1d7f865a9e7ae7fd4b69b6da4af7a30b55a5e5d915616ea0aac

    • SHA512

      11236da09ee6e97e71bd2b04cdd25dac2ab1b021a3f54f5761d25e5c6b42b78a8d0c1b6163214e19b4f79e14a4dc0d7f3b519687d9f4620c726664b72cde775b

    • SSDEEP

      49152:KBP1yXk3fQLThPJrwfRzrqLb6fCanBzx+mk1tjSJc:idy0vQLVPJr5LbCjt+my8Jc

    Score
    10/10
    netsupportrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks