General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260620-ajmlzadv2y
- SHA256 1156225b3044b8c418c0ba059362715248e194de200167c3b87e635d1deca502
- MD5 9e6250409dc52bfdaf06b8cbafc760b4
- SHA1 9f49789092eb18873ea1348cf21f6cb456c28b1b
- SHA512 8d86dc025990dad874be62873aa9d692ba94426343cbed627998290b2978c95065b3b707903df5ee6d1fdca764fca0a8f5db807c49efe2db60ffc19bc84d6ec7
- SSDEEP 196608:zoHQjDSOgtUPzDoHQjDSOgtSDoHQjDSOgtyDoHQjDSOgt:zowXSSPowXSUowXSIowXS
- TLSH T125A6233123E5C46AE4F21A36E9B961B0113ABCA4D953C25F5364BD4E6E71D80E9B3333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 1156225b3044b8c418c0ba059362715248e194de200167c3b87e635d1deca502
- MD5 9e6250409dc52bfdaf06b8cbafc760b4
- SHA1 9f49789092eb18873ea1348cf21f6cb456c28b1b
- SHA512 8d86dc025990dad874be62873aa9d692ba94426343cbed627998290b2978c95065b3b707903df5ee6d1fdca764fca0a8f5db807c49efe2db60ffc19bc84d6ec7
- SSDEEP 196608:zoHQjDSOgtUPzDoHQjDSOgtSDoHQjDSOgtyDoHQjDSOgt:zowXSSPowXSUowXSIowXS
- TLSH T125A6233123E5C46AE4F21A36E9B961B0113ABCA4D953C25F5364BD4E6E71D80E9B3333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.