General
- Target support.client.exe
- Size 305KB
- Sample260602-alpjcaaz3r
- SHA256 e7fe7fbcd7648b473caf4db264caa4b44179e391520bd72ef2263f0885c0e133
- MD5 f5d5aa4f63f6318325ec94bf25650bc0
- SHA1 ddd60fea095548198a715e0b7eb60ed2e7f70e49
- SHA512 a84197b9d97faf1cf1f398e6d7f2749b0cdc3700e7a25f9f6d824141337df37bd897d7d502f89e519bcb2f5dff8dfb13a30a87587fef48d5728bbdd8f1dc1001
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T189647D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
support.client.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
support.client.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target support.client.exe
- Size 305KB
- SHA256 e7fe7fbcd7648b473caf4db264caa4b44179e391520bd72ef2263f0885c0e133
- MD5 f5d5aa4f63f6318325ec94bf25650bc0
- SHA1 ddd60fea095548198a715e0b7eb60ed2e7f70e49
- SHA512 a84197b9d97faf1cf1f398e6d7f2749b0cdc3700e7a25f9f6d824141337df37bd897d7d502f89e519bcb2f5dff8dfb13a30a87587fef48d5728bbdd8f1dc1001
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T189647D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
Signed with revoked ConnectWise certificate
Binary is signed using a ConnectWise certificate revoked for key compromise.
Executes dropped EXE