General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260628-wt7wjsbs2s
- SHA256 22ca51fdef3f2da7c34576e1101a88d8b52faae61775eb10717b4dd4ca5f975e
- MD5 b5ced47168a4289d572e34693a325fa3
- SHA1 e3634995f2c70d66a09c973b3e4b66c94a9e55ae
- SHA512 abc10d6a90cb0c9bc89cc0426848c163ae8afa1a998c5cbe504d1b704d2ee6b4588059b8ea867b4faadebdccece52ec4948b65fb1d55c0590cf571d42493d693
- SSDEEP 196608:woHQjDSOgtOPODoHQjDSOgtSDoHQjDSOgtYDoHQjDSOgt:wowXSkKowXSUowXSyowXS
- TLSH T13DA6233123E5C46AE4F21A36E9B961B0113ABCA4D953C25F5364BD4E6E71D80E9B3333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 22ca51fdef3f2da7c34576e1101a88d8b52faae61775eb10717b4dd4ca5f975e
- MD5 b5ced47168a4289d572e34693a325fa3
- SHA1 e3634995f2c70d66a09c973b3e4b66c94a9e55ae
- SHA512 abc10d6a90cb0c9bc89cc0426848c163ae8afa1a998c5cbe504d1b704d2ee6b4588059b8ea867b4faadebdccece52ec4948b65fb1d55c0590cf571d42493d693
- SSDEEP 196608:woHQjDSOgtOPODoHQjDSOgtSDoHQjDSOgtYDoHQjDSOgt:wowXSkKowXSUowXSyowXS
- TLSH T13DA6233123E5C46AE4F21A36E9B961B0113ABCA4D953C25F5364BD4E6E71D80E9B3333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.