General
- Target AWSCLIV2.msi
- Size 46.1MB
- Sample260619-pla4aafy8k
- SHA256 ce333f1f406a1a36dd15e66814be5d18d10c804b0ae71b4521b4c9bee2379daa
- MD5 b9147c3078106954dc524f44f58b6d06
- SHA1 c4d5cad3f1d5483595e33fc11b74fb92e4090b4c
- SHA512 4b4deb4d54a347e3c03e7421a93a1a855b851998645b53414a2c0f6778628a7d439d936f34e957ae4ab9e06f48a5c493ff2d7f199f1107392c819eeabfce06cb
- SSDEEP 786432:A/P8vpyQUCJ3ufx2hb6//Qz3IPrTgCRYFRF4vvxxiOTsRAl00dwVmoIPxkdcNjbd:OPIpyQUCVvhb6HQm0CYF4nxxZA0dPNNV
- TLSH T10AB733A26B722D66C46CE17B639217419F620FE07B1203059D74BA4C5D3E2FD8B6D28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AWSCLIV2.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AWSCLIV2.msi
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target AWSCLIV2.msi
- Size 46.1MB
- SHA256 ce333f1f406a1a36dd15e66814be5d18d10c804b0ae71b4521b4c9bee2379daa
- MD5 b9147c3078106954dc524f44f58b6d06
- SHA1 c4d5cad3f1d5483595e33fc11b74fb92e4090b4c
- SHA512 4b4deb4d54a347e3c03e7421a93a1a855b851998645b53414a2c0f6778628a7d439d936f34e957ae4ab9e06f48a5c493ff2d7f199f1107392c819eeabfce06cb
- SSDEEP 786432:A/P8vpyQUCJ3ufx2hb6//Qz3IPrTgCRYFRF4vvxxiOTsRAl00dwVmoIPxkdcNjbd:OPIpyQUCVvhb6HQm0CYF4nxxZA0dPNNV
- TLSH T10AB733A26B722D66C46CE17B639217419F620FE07B1203059D74BA4C5D3E2FD8B6D28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.