Overview

overview

10

Static

static

1

faf9b23508...c7.zip

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faf9b23508c4445bf9017cacb3b4f08f39d0cd0cd48cc17156320abb6083d9c7

  • Size

    2.2MB

  • Sample

    241213-y33paszlhj

  • MD5

    968cc131465c7d251ccbc6806b157283

  • SHA1

    93da97c4eb5460ba60d6273818e3c5ea5d74b7b6

  • SHA256

    faf9b23508c4445bf9017cacb3b4f08f39d0cd0cd48cc17156320abb6083d9c7

  • SHA512

    5e4b6ab5d506d3bc5fd4ac3bf9485f109d290e82e9666be614f7cd10b8b006c5b2bcab851d70a2f18584233da17e6db07dd8d90cdc7b353b2ba1c1c76b7a07ab

  • SSDEEP

    49152:KlLUXP5qRroZT5YNdzlIbnNsOF9LFLbCNFlVG5PWZ5FvcBi:KlLUf5qRroGKsODLFLCFbIP+Ui

Score
10/10
netsupportdiscoveryrat

Malware Config

Targets

    • Target

      faf9b23508c4445bf9017cacb3b4f08f39d0cd0cd48cc17156320abb6083d9c7

    • Size

      2.2MB

    • MD5

      968cc131465c7d251ccbc6806b157283

    • SHA1

      93da97c4eb5460ba60d6273818e3c5ea5d74b7b6

    • SHA256

      faf9b23508c4445bf9017cacb3b4f08f39d0cd0cd48cc17156320abb6083d9c7

    • SHA512

      5e4b6ab5d506d3bc5fd4ac3bf9485f109d290e82e9666be614f7cd10b8b006c5b2bcab851d70a2f18584233da17e6db07dd8d90cdc7b353b2ba1c1c76b7a07ab

    • SSDEEP

      49152:KlLUXP5qRroZT5YNdzlIbnNsOF9LFLbCNFlVG5PWZ5FvcBi:KlLUf5qRroGKsODLFLCFbIP+Ui

    Score
    10/10
    netsupportdiscoveryrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Netsupport family

      netsupport

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks