General

  • Target
    rats.zip
  • Size 6.1MB
  • Sample260913-gzdsbssfla
  • SHA256 f95fb9f3787981a2b4f3dd22badc13f0a32230da02d926abc5fe902c6050d984
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      HTCTL32.DLL
    • Size 320KB
    • SHA256 edfe2b923bfb5d1088de1611401f5c35ece91581e71503a5631647ac51f7d796
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PCICHEK.DLL
    • Size 18KB
    • SHA256 313117e723dda6ea3911faacd23f4405003fb651c73de8deff10b9eb5b4a058a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PCICL32.DLL
    • Size 3.6MB
    • SHA256 63aa18c32af7144156e7ee2d5ba0fa4f5872a7deb56894f6f96505cbc9afe6f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      TCCTL32.DLL
    • Size 387KB
    • SHA256 6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      branding.dll
    • Size 50KB
    • SHA256 214bb96e33fac6fa19f5c33f950267bf5d25507d0f78eee1707f16442eaecb5d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      client32.exe
    • Size 117KB
    • SHA256 06a0a243811e9c4738a9d413597659ca8d07b00f640b74adc9cb351c179b3268
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

    • Target
      hw.dll
    • Size 1.6MB
    • SHA256 be45f76049a133392423679d334c69c8e1e7e82dc873eebdd229ea0341ba1b10
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      msvcr100.dll
    • Size 755KB
    • SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      nkageh/avutil-59.dll
    • Size 1006KB
    • SHA256 2fae8b53478910826f8641184ec2c0ffa63c73565e17e9b486a69861f57fc70f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      nkageh/libopus-0.dll
    • Size 408KB
    • SHA256 ebb08f38d0585d734ec0ef3e5c9b504c8f3c11e4c9f0d5488e6dd4769c6b5c9b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      nkageh/libwinpthread-1.dll
    • Size 54KB
    • SHA256 1ffa354ea28e261ca2c5b313237c28f74e88595a1270c2c9cae93eb34673ce79
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      nkajko/avutil-59.dll
    • Size 1006KB
    • SHA256 2fae8b53478910826f8641184ec2c0ffa63c73565e17e9b486a69861f57fc70f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      nkajko/libopus-0.dll
    • Size 408KB
    • SHA256 ebb08f38d0585d734ec0ef3e5c9b504c8f3c11e4c9f0d5488e6dd4769c6b5c9b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      nkajko/libwinpthread-1.dll
    • Size 54KB
    • SHA256 1ffa354ea28e261ca2c5b313237c28f74e88595a1270c2c9cae93eb34673ce79
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      pcicapi.dll
    • Size 32KB
    • SHA256 9074fd40ea6a0caa892e6361a6a4e834c2e51e6e98d1ffcda7a9a537594a6917
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      remcmdstub.exe
    • Size 75KB
    • SHA256 6558b3307215c4b73fc96dc552213427fb9b28c0cb282fe6c38324f1e68e87d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

discoverynetsupportrat
Score
10/10

behavioral12

discoverynetsupportrat
Score
10/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10