General
- Target ScreenConnect.ClientSetup.exe
- Size 14.3MB
- Sample260709-m7b7cshs8m
- SHA256 4c0437b9409a5ae0452e1c7355064a7a7836fe8fd47f983b201fe8723f7d85bb
- MD5 a906be18502bde2e034e5b790102b43c
- SHA1 7e0f4f364efc3ce585a7cde220defd4bb3f95f8a
- SHA512 0795019820026a3ad6f28c5b252eee1ff8a5418c68fff184898cc450f86c509945a21dd879d54c163ea6b611d327c281b0da14692ea249de14d679a8293fdbaf
- SSDEEP 393216:2q5VDBCDxfQEIq5VDBCDx0q5VDBCDxRq5VDBCDx0q5VDBCDxQ:2pKEIpipDpmpW
- TLSH T142E61212B3D69475D0BF0638D83A53656B35BC008B65C6AF6394B8692D33BC08E727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.exe
- Size 14.3MB
- SHA256 4c0437b9409a5ae0452e1c7355064a7a7836fe8fd47f983b201fe8723f7d85bb
- MD5 a906be18502bde2e034e5b790102b43c
- SHA1 7e0f4f364efc3ce585a7cde220defd4bb3f95f8a
- SHA512 0795019820026a3ad6f28c5b252eee1ff8a5418c68fff184898cc450f86c509945a21dd879d54c163ea6b611d327c281b0da14692ea249de14d679a8293fdbaf
- SSDEEP 393216:2q5VDBCDxfQEIq5VDBCDx0q5VDBCDxRq5VDBCDx0q5VDBCDxQ:2pKEIpipDpmpW
- TLSH T142E61212B3D69475D0BF0638D83A53656B35BC008B65C6AF6394B8692D33BC08E727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.