General
- Target support.client.exe
- Size 305KB
- Sample260602-peeswsdz6j
- SHA256 f7a8990967451895c005989eb9d865b1527b280fee281277e6febdd360e66297
- MD5 e03fe210c959e4fea3afddcce8c99d18
- SHA1 dc2883cf532deeaf15cd0e6a266c110daf62ba32
- SHA512 bb8e172e3f7c39f32e48326b53998608b327a2193a69a910a4bdbdd01c96cc2739b831d986554dfbb78d889b0c75fd000c0605fcb7a6576dc1f36ced666e2092
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T1AC646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
support.client.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
support.client.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target support.client.exe
- Size 305KB
- SHA256 f7a8990967451895c005989eb9d865b1527b280fee281277e6febdd360e66297
- MD5 e03fe210c959e4fea3afddcce8c99d18
- SHA1 dc2883cf532deeaf15cd0e6a266c110daf62ba32
- SHA512 bb8e172e3f7c39f32e48326b53998608b327a2193a69a910a4bdbdd01c96cc2739b831d986554dfbb78d889b0c75fd000c0605fcb7a6576dc1f36ced666e2092
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T1AC646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
Signed with revoked ConnectWise certificate
Binary is signed using a ConnectWise certificate revoked for key compromise.