hxxp://relay[.]blueyheeler[.]xyz[:]8040/Bin/ScreenConnect[.]ClientSetup[.]msi?e=Access&y=Guest

Login
Reports

Overview

overview

Static

static

URLScan

urlscan

http://relay.blueyhe...

windows10-2004-x64

http://relay.blueyhe...

windows10-ltsc_2021-x64

http://relay.blueyhe...

windows11-21h2-x64

http://relay.blueyhe...

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://relay.blueyheeler.xyz:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest

Resource

win10v2004-20260513-en

windows10-2004-x64

29 signatures

300 seconds

Behavioral task

behavioral2

Sample

http://relay.blueyheeler.xyz:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

31 signatures

300 seconds

backdoor discovery persistence privilege_escalation ransomware rat revoked_codesign

Behavioral task

behavioral3

Sample

http://relay.blueyheeler.xyz:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest

Resource

win11-20260513-en

windows11-21h2-x64

30 signatures

300 seconds

backdoor discovery persistence privilege_escalation ransomware rat revoked_codesign

Behavioral task

behavioral4

Sample

http://relay.blueyheeler.xyz:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

31 signatures

300 seconds

backdoor discovery persistence privilege_escalation ransomware rat revoked_codesign

General

Target
http://relay.blueyheeler.xyz:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest
Sample260810-ml65lswhrg

Sharing

General

Malware Config

Signatures

File Explorer