General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260712-all38abv5q
- SHA256 ad1458a0d59991a204fbf7e10545733e80c42d5f646c0adf91d243c8dc1728bb
- MD5 155b7305f455fc5b5276a4b07aa4043e
- SHA1 3278ff48fbcaabe8b53127ec507959869573cc43
- SHA512 9d5849b7c43f0d92b711b594c20b65d193cd69670dd46b2a55708f12ada632ff5d9760632fd7305e9512acddc30d473d994a7793dfe41a1d68665d196c21ea24
- SSDEEP 196608:Eeq5KqDBCDkStgQEeeq5KqDBCDkSt3eq5KqDBCDkStGeq5KqDBCDkSt:pq5VDBCDxgQEDq5VDBCDxOq5VDBCDxrT
- TLSH T196A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 ad1458a0d59991a204fbf7e10545733e80c42d5f646c0adf91d243c8dc1728bb
- MD5 155b7305f455fc5b5276a4b07aa4043e
- SHA1 3278ff48fbcaabe8b53127ec507959869573cc43
- SHA512 9d5849b7c43f0d92b711b594c20b65d193cd69670dd46b2a55708f12ada632ff5d9760632fd7305e9512acddc30d473d994a7793dfe41a1d68665d196c21ea24
- SSDEEP 196608:Eeq5KqDBCDkStgQEeeq5KqDBCDkSt3eq5KqDBCDkStGeq5KqDBCDkSt:pq5VDBCDxgQEDq5VDBCDxOq5VDBCDxrT
- TLSH T196A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.