General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260718-ak621ah18l
- SHA256 f3cf267c3ca14c67c0cf05c5202daf225d8d9d8205f5bd43375923baa6605f86
- MD5 c49a0f7d0465f4ef7719641e0936f42d
- SHA1 8f2c31b23a345a443ab637d9db188465e5586244
- SHA512 d6a2af872cfc4e19270b984eb0d594db310b139c456a9259007ffd44572067d164c498be84c31e8892d7e85c5538d3fc172f74fe8f010d43ca15b08edf9711e1
- SSDEEP 196608:Zeq5KqDBCDkStDQEBeq5KqDBCDkSt3eq5KqDBCDkStyeq5KqDBCDkSt:Aq5VDBCDxDQEoq5VDBCDxOq5VDBCDxPT
- TLSH T137A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 f3cf267c3ca14c67c0cf05c5202daf225d8d9d8205f5bd43375923baa6605f86
- MD5 c49a0f7d0465f4ef7719641e0936f42d
- SHA1 8f2c31b23a345a443ab637d9db188465e5586244
- SHA512 d6a2af872cfc4e19270b984eb0d594db310b139c456a9259007ffd44572067d164c498be84c31e8892d7e85c5538d3fc172f74fe8f010d43ca15b08edf9711e1
- SSDEEP 196608:Zeq5KqDBCDkStDQEBeq5KqDBCDkSt3eq5KqDBCDkStyeq5KqDBCDkSt:Aq5VDBCDxDQEoq5VDBCDxOq5VDBCDxPT
- TLSH T137A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.