General
- Target AWSCLIV2.msi
- Size 46.8MB
- Sample260717-wpmd2shv7m
- SHA256 3e1cf445aa6aad2454ac547d7cba039f75944d35540db17ba586243958e527d0
- MD5 7db9000001dcc82dd513c3c32519a2e0
- SHA1 6c3ca1848ff626b4bcd2cac9a2b8ff47e01a8d2b
- SHA512 a23f1a934b082de81b1a2c09e37194ed71f649b6c45cbdf41ab988d4b26b51b938cf8811dee69caeb1884e2b873ab6737ba3c4c8d28b70a478e110b099fdd0b2
- SSDEEP 786432:eeBvZpylgZ6Sl5PuHFm5BNWh3YhJ+RvyN26vdcR7wtugSU1cTgKvbQnMyPhsDkKM:Hhpya6Sl5PnB0MJ4Z+MCWnPyP5rVij
- TLSH T113B733D3AB7AAD52C661E13B57A36781DB221F607B17031D5E24E24CCC3D1E98BE8187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AWSCLIV2.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AWSCLIV2.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target AWSCLIV2.msi
- Size 46.8MB
- SHA256 3e1cf445aa6aad2454ac547d7cba039f75944d35540db17ba586243958e527d0
- MD5 7db9000001dcc82dd513c3c32519a2e0
- SHA1 6c3ca1848ff626b4bcd2cac9a2b8ff47e01a8d2b
- SHA512 a23f1a934b082de81b1a2c09e37194ed71f649b6c45cbdf41ab988d4b26b51b938cf8811dee69caeb1884e2b873ab6737ba3c4c8d28b70a478e110b099fdd0b2
- SSDEEP 786432:eeBvZpylgZ6Sl5PuHFm5BNWh3YhJ+RvyN26vdcR7wtugSU1cTgKvbQnMyPhsDkKM:Hhpya6Sl5PnB0MJ4Z+MCWnPyP5rVij
- TLSH T113B733D3AB7AAD52C661E13B57A36781DB221F607B17031D5E24E24CCC3D1E98BE8187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.