Overview

overview

10

Static

static

3

programm/soft.exe

windows10-1703-x64

10

programm/soft.exe

windows10-2004-x64

10

programm/soft.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    programm.zip

  • Size

    2.1MB

  • Sample

    240729-zef13atekd

  • MD5

    4ceeef6d03615b0fce916e76f9f6172b

  • SHA1

    2e9d743118adc0c1333bf11730a95ae3d2395c14

  • SHA256

    d9a6968a5a9d65a9de72e77bd6c3b27612efbba5a393aad36dfcd03b0ccaa13a

  • SHA512

    6ce30e953286e6e654c60efbce3b9724ede8251cf4444df98be54073bd10c749f6bc400d94cbf4c55255a20f999eae92b34f97bd5f7516419a08821a992b1cd4

  • SSDEEP

    49152:8jW0xxyYrp7wVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02PN8mWLawS6+:8qGISqENOzeuAGrXnF6uolGu4o+

Score
10/10
netsupportdiscoveryrat

Malware Config

Targets

    • Target

      programm/soft.exe

    • Size

      54KB

    • MD5

      4cb25a4d34304410017210125112bc79

    • SHA1

      021f72c016402db9fef4e1953f1b4b7251fea2fb

    • SHA256

      3d15fff559a6279db51ae58202c03167f69797340c4e581a6b5c4898d8e2e244

    • SHA512

      62f32e442f587950223f816fbde09d4eaaea38c5365209894a7df6e3b296153ee480289666904b0feb9996277af750b539f0b8564bbe66e7e822bddc828d6e74

    • SSDEEP

      1536:HtvrImfzoXK6DDvvvDvpvZMt+pan/opglD2:lImfzoXK9/o6o

    Score
    10/10
    netsupportdiscoveryrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks