General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260714-ahn4eaaz8l
- SHA256 ab64e8b9bf5509193a3283b0b0263c9461780fd0e1fc23fc010dc8dc904af2f4
- MD5 6c060b9cb5e9270d40b2bd4dc76dedc3
- SHA1 291e7d0562050aed60fcd9d52aac65b5e45410ae
- SHA512 9f6c11ddc7e017311b29b2056213e5fe5881e812869a6f00d3fcfa0c7f85e9ff2d857de17b3ea04a10a741d42cb1f1f75ad3e897f67b31171097febf87b9f4d4
- SSDEEP 196608:weq5KqDBCDkStxQE0eq5KqDBCDkSt3eq5KqDBCDkSt2eq5KqDBCDkSt:tq5VDBCDxxQE5q5VDBCDxOq5VDBCDx7T
- TLSH T1B0A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 ab64e8b9bf5509193a3283b0b0263c9461780fd0e1fc23fc010dc8dc904af2f4
- MD5 6c060b9cb5e9270d40b2bd4dc76dedc3
- SHA1 291e7d0562050aed60fcd9d52aac65b5e45410ae
- SHA512 9f6c11ddc7e017311b29b2056213e5fe5881e812869a6f00d3fcfa0c7f85e9ff2d857de17b3ea04a10a741d42cb1f1f75ad3e897f67b31171097febf87b9f4d4
- SSDEEP 196608:weq5KqDBCDkStxQE0eq5KqDBCDkSt3eq5KqDBCDkSt2eq5KqDBCDkSt:tq5VDBCDxxQE5q5VDBCDxOq5VDBCDx7T
- TLSH T1B0A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.