Overview

overview

10

Static

static

7

FakturaPDF.exe

windows7-x64

7

FakturaPDF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FakturaPDF.exe

  • Size

    992KB

  • Sample

    240828-vahxmsycjp

  • MD5

    3d1c6d7d8127b4bee872fdc3100efc98

  • SHA1

    119d54287ef32c14f1bb3fc3acc5671b5a912300

  • SHA256

    629463eeaf09ac3f51a7adf9c29d43b73f06bb92448243f6c9b8c7b9c1efbcd5

  • SHA512

    ed341fd75106d1ee2efc863dcc4f8ca2f1ef145314effbf2b9a186307751d9979d0fee1e5747d9fa4723f76dabf4f5241b49f226b3da943f30b6210d94bbd27a

  • SSDEEP

    12288:AZ/oDqUctQOtY1TOu55f2bWlikyQjf9+Kofx8JqyT4AYG0p+E+kr:AZoDqBcSu66NygVoFGGb+kr

Score
10/10
netsupportdiscoveryratupx

Malware Config

Targets

    • Target

      FakturaPDF.exe

    • Size

      992KB

    • MD5

      3d1c6d7d8127b4bee872fdc3100efc98

    • SHA1

      119d54287ef32c14f1bb3fc3acc5671b5a912300

    • SHA256

      629463eeaf09ac3f51a7adf9c29d43b73f06bb92448243f6c9b8c7b9c1efbcd5

    • SHA512

      ed341fd75106d1ee2efc863dcc4f8ca2f1ef145314effbf2b9a186307751d9979d0fee1e5747d9fa4723f76dabf4f5241b49f226b3da943f30b6210d94bbd27a

    • SSDEEP

      12288:AZ/oDqUctQOtY1TOu55f2bWlikyQjf9+Kofx8JqyT4AYG0p+E+kr:AZoDqBcSu66NygVoFGGb+kr

    Score
    10/10
    upxnetsupportdiscoveryrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks