Overview

overview

10

Static

static

5

Driver/PCICHEK.dll

windows10-2004-x64

3

Driver/PCICHEK.dll

windows11-ltsc_2024-x64

3

Driver/PCICL32.dll

windows10-2004-x64

3

Driver/PCICL32.dll

windows11-ltsc_2024-x64

3

Driver/Sysmon.exe

windows10-2004-x64

10

Driver/Sysmon.exe

windows11-ltsc_2024-x64

10

Driver/TCCTL32.dll

windows10-2004-x64

3

Driver/TCCTL32.dll

windows11-ltsc_2024-x64

3

Driver/htctl32.dll

windows10-2004-x64

3

Driver/htctl32.dll

windows11-ltsc_2024-x64

3

Driver/msvcr100.dll

windows10-2004-x64

3

Driver/msvcr100.dll

windows11-ltsc_2024-x64

3

Driver/pcicapi.dll

windows10-2004-x64

3

Driver/pcicapi.dll

windows11-ltsc_2024-x64

3

Driver/remcmdstub.exe

windows10-2004-x64

3

Driver/remcmdstub.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Drivers20%281%29.zip
  • Size 2.1MB
  • Sample261104-pfdl8a1wax
  • SHA256 256d77476eb9c5c3a7c9928632736a5d6ddac3ca0c466dcc75107d1213873923
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
netsupportdiscoveryrat

Malware Config

Targets

    • Target
      Driver/PCICHEK.DLL
    • Size 31KB
    • SHA256 45532e8ecdccca684dd3b492c58485b0b2987893f5c7a3590c60f5fcaec4a27c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      Driver/PCICL32.DLL
    • Size 3.3MB
    • SHA256 adc7aeb96dd4c244afc5b354b0100d29d224e3b8a71e88afa281df4be56c36dd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      Driver/Sysmon.exe
    • Size 117KB
    • SHA256 bc020b95fc01fae40e13f429eaddeac6c08755399d96d06e9dbea22114eb595c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverynetsupportrat

    • Family: NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

      ratnetsupport
    behavioral5behavioral6
    • Target
      Driver/TCCTL32.DLL
    • Size 459KB
    • SHA256 d03c41b7f46ef897fad02925251bdce78f1079bb7a1aa2f853704fbe81f759d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      Driver/htctl32.dll
    • Size 316KB
    • SHA256 6562585009f15155eea9a489e474cebc4dd2a01a26d846fdd1b93fdc24b0c269
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      Driver/msvcr100.dll
    • Size 755KB
    • SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      Driver/pcicapi.dll
    • Size 48KB
    • SHA256 a580826b0cdd59387b77f41015a2c54c8bfcdf359c0edc72993a50299918f404
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      Driver/remcmdstub.exe
    • Size 75KB
    • SHA256 3f9cdacaf03050325aa554e4f7bc769ce2fe9554a06237a1ec8a191bade0bf18
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks