General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260722-hb14dsem5x
- SHA256 ff915ee771d92e45b4a19f35f6aa6ce38b3d8cbaec16bde6e285d61b450d0063
- MD5 b00d21a4b4e63014adb3913b344ff3e9
- SHA1 7ea14f86a8a97dbd009b1401946b8b00b57b6853
- SHA512 e46179c02edea9adb66e86fd9b72c39fa0e6140bce236128d2d5939dd5aa34e08ebcb9974cfd733be55b33417971e8ed9acff516b8459e9bc0c7ddcf3f9b796e
- SSDEEP 196608:3eq5KqDBCDkStxQEneq5KqDBCDkSt3eq5KqDBCDkSt2eq5KqDBCDkSt:Oq5VDBCDxxQEeq5VDBCDxOq5VDBCDx7T
- TLSH T15DA6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 ff915ee771d92e45b4a19f35f6aa6ce38b3d8cbaec16bde6e285d61b450d0063
- MD5 b00d21a4b4e63014adb3913b344ff3e9
- SHA1 7ea14f86a8a97dbd009b1401946b8b00b57b6853
- SHA512 e46179c02edea9adb66e86fd9b72c39fa0e6140bce236128d2d5939dd5aa34e08ebcb9974cfd733be55b33417971e8ed9acff516b8459e9bc0c7ddcf3f9b796e
- SSDEEP 196608:3eq5KqDBCDkStxQEneq5KqDBCDkSt3eq5KqDBCDkSt2eq5KqDBCDkSt:Oq5VDBCDxxQEeq5VDBCDxOq5VDBCDx7T
- TLSH T15DA6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.