General
- Target support.client.exe
- Size 305KB
- Sample260601-j46d9ahs5m
- SHA256 5844fd49b15cfcefa8cef8f5dd5af3f94a25506534585755e0c8c921df4d793a
- MD5 17da3102a0cb8ce9f0d03d4c549b5a92
- SHA1 56c0911da76b5a48d09f7be97290906718f477a7
- SHA512 6aee7e8663d63fc9c7061381b8b998caf43217aa63ebb5e1fd9322c6272a226d7e560e7eb0a677cb70fb3ebcafbe6c64125ae181dfd9bdee4073f0fa4ffbcb95
- SSDEEP 6144:imlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9q:h1iw7gryNkSV1hy1Z1u2JLu9q
- TLSH T128646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
support.client.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
support.client.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target support.client.exe
- Size 305KB
- SHA256 5844fd49b15cfcefa8cef8f5dd5af3f94a25506534585755e0c8c921df4d793a
- MD5 17da3102a0cb8ce9f0d03d4c549b5a92
- SHA1 56c0911da76b5a48d09f7be97290906718f477a7
- SHA512 6aee7e8663d63fc9c7061381b8b998caf43217aa63ebb5e1fd9322c6272a226d7e560e7eb0a677cb70fb3ebcafbe6c64125ae181dfd9bdee4073f0fa4ffbcb95
- SSDEEP 6144:imlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9q:h1iw7gryNkSV1hy1Z1u2JLu9q
- TLSH T128646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
Signed with revoked ConnectWise certificate
Binary is signed using a ConnectWise certificate revoked for key compromise.
Executes dropped EXE