General
- Target ScreenConnect.ClientSetup.exe
- Size 14.2MB
- Sample260701-nsnsaaey91
- SHA256 16acc15ddf410663104f557711ea5442b773bb5976f10837551cc5afdfe5c850
- MD5 21dfd99c60a7592e43585f7a8e3be232
- SHA1 ea9ae1f73bcea6fab0811cfcc0e0a16354d9d87a
- SHA512 b62be1825253976a7be5230a18b14cd2fce00bfdeab69357fa2c4d92bf2a65e71f09b6077f0235ef14ab9d2856f4287f44209e71ca8552c6886cac4f2c32b714
- SSDEEP 196608:Dc8fefPdoHQjDSOgtSPIDoHQjDSOgtfDoHQjDSOgtADoHQjDSOgt+DoHQjDSOgtn:4LowXSskowXS5owXS6owXSEowXSV
- TLSH T1C7E61211B3D694BAD4BB0638D87A62655235BC148762C3FF6790BD6E2D32BC09D32363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.exe
Resource
win11-20260513-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.exe
- Size 14.2MB
- SHA256 16acc15ddf410663104f557711ea5442b773bb5976f10837551cc5afdfe5c850
- MD5 21dfd99c60a7592e43585f7a8e3be232
- SHA1 ea9ae1f73bcea6fab0811cfcc0e0a16354d9d87a
- SHA512 b62be1825253976a7be5230a18b14cd2fce00bfdeab69357fa2c4d92bf2a65e71f09b6077f0235ef14ab9d2856f4287f44209e71ca8552c6886cac4f2c32b714
- SSDEEP 196608:Dc8fefPdoHQjDSOgtSPIDoHQjDSOgtfDoHQjDSOgtADoHQjDSOgt+DoHQjDSOgtn:4LowXSskowXS5owXS6owXSEowXSV
- TLSH T1C7E61211B3D694BAD4BB0638D87A62655235BC148762C3FF6790BD6E2D32BC09D32363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.