Overview

overview

10

Static

static

1

Chrome 134...115.js

windows10-2004-x64

10

Resubmissions

27/03/2025, 20:13

250327-yzgmnaxwav 8

27/03/2025, 19:56

250327-ynsksazjs7 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome 134.0.6999.14115.js

  • Size

    1.3MB

  • Sample

    250327-ynsksazjs7

  • MD5

    e276013cd57428820cccef3b09456fce

  • SHA1

    fc4202cf424ce4084ea5cc98af0b0e164786beb9

  • SHA256

    3c4b87be8450e3120b7ad2b11ff59850950beb39906dc1636b3ee7b6390f2086

  • SHA512

    c3838300e48ccf8f45cfbb691f968d7fcad86fdc289f0a93e4caf0972563d682cac1c72253d5942439414152e5a3219fb77a5e496718d763f8a0a0f82c524f8c

  • SSDEEP

    12288:wum1wz4FL5dM2f8f3ue1wz4FL5dM2f8f7:OCz4F9dM2f8frCz4F9dM2f8f7

Score
10/10
netsupportdiscoveryexecutionpersistencerat

Malware Config

Targets

    • Target

      Chrome 134.0.6999.14115.js

    • Size

      1.3MB

    • MD5

      e276013cd57428820cccef3b09456fce

    • SHA1

      fc4202cf424ce4084ea5cc98af0b0e164786beb9

    • SHA256

      3c4b87be8450e3120b7ad2b11ff59850950beb39906dc1636b3ee7b6390f2086

    • SHA512

      c3838300e48ccf8f45cfbb691f968d7fcad86fdc289f0a93e4caf0972563d682cac1c72253d5942439414152e5a3219fb77a5e496718d763f8a0a0f82c524f8c

    • SSDEEP

      12288:wum1wz4FL5dM2f8f3ue1wz4FL5dM2f8f7:OCz4F9dM2f8frCz4F9dM2f8f7

    Score
    10/10
    netsupportdiscoveryexecutionpersistencerat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Netsupport family

      netsupport

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks