Overview

overview

10

Static

static

3

dropper (i...d).zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dropper (infected).zip

  • Size

    2.4MB

  • Sample

    241113-zstjbaslgk

  • MD5

    b8d0924ea981b99d8e856b1f013cfeda

  • SHA1

    e57a6dd63d3186ad6e61bba5e782cce0be589183

  • SHA256

    b4fc1f1ec4841c672740024138b18332033eec5a8378ee9f6496211a05497bd2

  • SHA512

    5216523da5ff0a543a79bdb60bf76ccc287b1f49caf9c7f8748f7b98edfcf72fdd7ccae0edee578fb307cd3e0679eeae2bf86826e47c96d1d580ab7c13741674

  • SSDEEP

    49152:CoEdoCPK4sUz4OOAZJF8m9aMpw6T+rCG0swc/KE1K8mSNNO1pTz3dQXXM:sRmUz35b8EbwY+r9x6ANNOf3+nM

Score
10/10
netsupportdiscoveryrat

Malware Config

Targets

    • Target

      dropper (infected).zip

    • Size

      2.4MB

    • MD5

      b8d0924ea981b99d8e856b1f013cfeda

    • SHA1

      e57a6dd63d3186ad6e61bba5e782cce0be589183

    • SHA256

      b4fc1f1ec4841c672740024138b18332033eec5a8378ee9f6496211a05497bd2

    • SHA512

      5216523da5ff0a543a79bdb60bf76ccc287b1f49caf9c7f8748f7b98edfcf72fdd7ccae0edee578fb307cd3e0679eeae2bf86826e47c96d1d580ab7c13741674

    • SSDEEP

      49152:CoEdoCPK4sUz4OOAZJF8m9aMpw6T+rCG0swc/KE1K8mSNNO1pTz3dQXXM:sRmUz35b8EbwY+r9x6ANNOf3+nM

    Score
    10/10
    netsupportdiscoveryrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Netsupport family

      netsupport

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks