General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260715-aj6d3sh181
- SHA256 ec0f9bdfba4fb794189f26b568bd9a283946d21543a7a2390fb196420e64030d
- MD5 ae23be1db49e01faf7e91112d8e597a4
- SHA1 f0a77029dde7e262487ac5e19adadd93d01a85e6
- SHA512 9679f0d2bb3c5adf6b73e4fd89019fc01d5679b83d1a92252a4f30367556656b1e7415bcea0bb17109a57838d51f2f30b9ad8003b2f24b305f04eb788bcddbce
- SSDEEP 196608:peq5KqDBCDkStDQEpeq5KqDBCDkSt3eq5KqDBCDkStyeq5KqDBCDkSt:wq5VDBCDxDQEwq5VDBCDxOq5VDBCDxPT
- TLSH T105A6233267E8D425F1B60B3AEC3686B16A39BD10DF15C40F2364784D6972D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 ec0f9bdfba4fb794189f26b568bd9a283946d21543a7a2390fb196420e64030d
- MD5 ae23be1db49e01faf7e91112d8e597a4
- SHA1 f0a77029dde7e262487ac5e19adadd93d01a85e6
- SHA512 9679f0d2bb3c5adf6b73e4fd89019fc01d5679b83d1a92252a4f30367556656b1e7415bcea0bb17109a57838d51f2f30b9ad8003b2f24b305f04eb788bcddbce
- SSDEEP 196608:peq5KqDBCDkStDQEpeq5KqDBCDkSt3eq5KqDBCDkStyeq5KqDBCDkSt:wq5VDBCDxDQEwq5VDBCDxOq5VDBCDxPT
- TLSH T105A6233267E8D425F1B60B3AEC3686B16A39BD10DF15C40F2364784D6972D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.