NetSupport (96ecdb59-b047-4557-b2a7-c9712e8c903b)

NetSupport is a legitimate utility that has been long-used for remote management and monitoring (RMM) purposes. In recent years, it has been heavily abused by threat actors for maintaining persistent remote access to victim systems.^{[The DFIR Report NetSupport October 30 2023]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Black Basta Affiliates (7f52cadb-7a12-4b9d-9290-1ef02123fbe4)	Tidal Groups	NetSupport (96ecdb59-b047-4557-b2a7-c9712e8c903b)	Tidal Software	1
Storm-1811 (ee2da206-2532-44e3-a343-d66e9bfdbca0)	Tidal Groups	NetSupport (96ecdb59-b047-4557-b2a7-c9712e8c903b)	Tidal Software	1
NetSupport (96ecdb59-b047-4557-b2a7-c9712e8c903b)	Tidal Software	TA547 (ac3426c4-6d7e-4e99-9546-266fb7fd8c44)	Tidal Groups	1
NetSupport (96ecdb59-b047-4557-b2a7-c9712e8c903b)	Tidal Software	Scarlet Goldfinch (54a13c54-a1d5-46e9-b155-56d981a5ad8f)	Tidal Groups	1