General
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- Sample260810-zzyfvaaf37
- SHA256 8708bd6ed5d05c4515c8b9e5159d86f7b4a8b0c27d25313a0211d97ccdfb9d51
- MD5 6d251ab9aac08c0a7068501d205f3283
- SHA1 65a8d5c3f3595ee72ab24b63930264885201c554
- SHA512 4e32346a804ba0998a9eda4d3f21e2f12a23655b473013f17282f4606ac69e984ed6090cd20bfa8b698cabb173151135a6fd74dfbd27de81755e0e10dccba1be
- SSDEEP 196608:Weq5KqDBCDkSt+QEreq5KqDBCDkSt3eq5KqDBCDkSt6eq5KqDBCDkSt:bq5VDBCDx+QEKq5VDBCDxOq5VDBCDx3T
- TLSH T1A1A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 9.8MB
- SHA256 8708bd6ed5d05c4515c8b9e5159d86f7b4a8b0c27d25313a0211d97ccdfb9d51
- MD5 6d251ab9aac08c0a7068501d205f3283
- SHA1 65a8d5c3f3595ee72ab24b63930264885201c554
- SHA512 4e32346a804ba0998a9eda4d3f21e2f12a23655b473013f17282f4606ac69e984ed6090cd20bfa8b698cabb173151135a6fd74dfbd27de81755e0e10dccba1be
- SSDEEP 196608:Weq5KqDBCDkSt+QEreq5KqDBCDkSt3eq5KqDBCDkSt6eq5KqDBCDkSt:bq5VDBCDx+QEKq5VDBCDxOq5VDBCDx3T
- TLSH T1A1A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.