Overview

overview

10

Static

static

3

abbecf6c53...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abbecf6c5345816825962a2660a97799aefde226630d51b27ada1f821d753471.exe

  • Size

    5.6MB

  • Sample

    250404-v4yj7a1xax

  • MD5

    1d8923d191850a2e38a3519432719ba6

  • SHA1

    67ff268bf5ef387a96fb0d6f76e2988d3ccdbb51

  • SHA256

    abbecf6c5345816825962a2660a97799aefde226630d51b27ada1f821d753471

  • SHA512

    08efbb66a371589b3d587076f5b366f8f3ba03d89bfa85b21bc90d6fb4a4c868e7ce146474dd0fb6c0ad321bce3b5cf6dcb02de8a4d502b81e735faadb6aa071

  • SSDEEP

    98304:+d/eb1j56MtaOMMsiz8Y9fxLOIWw/lIGs0A8NZpcl+t9mjh6eZUpVbuhKm4Lwalu:+d/eb1j56ibMMsA8YzOIWwU8NZp79G60

Score
10/10
netsupportdiscoveryrat

Malware Config

Targets

    • Target

      abbecf6c5345816825962a2660a97799aefde226630d51b27ada1f821d753471.exe

    • Size

      5.6MB

    • MD5

      1d8923d191850a2e38a3519432719ba6

    • SHA1

      67ff268bf5ef387a96fb0d6f76e2988d3ccdbb51

    • SHA256

      abbecf6c5345816825962a2660a97799aefde226630d51b27ada1f821d753471

    • SHA512

      08efbb66a371589b3d587076f5b366f8f3ba03d89bfa85b21bc90d6fb4a4c868e7ce146474dd0fb6c0ad321bce3b5cf6dcb02de8a4d502b81e735faadb6aa071

    • SSDEEP

      98304:+d/eb1j56MtaOMMsiz8Y9fxLOIWw/lIGs0A8NZpcl+t9mjh6eZUpVbuhKm4Lwalu:+d/eb1j56ibMMsA8YzOIWwU8NZp79G60

    Score
    10/10
    netsupportdiscoveryrat

    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport

    • Netsupport family

      netsupport

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks