General
- Target AWSCLIV2-2.36.21.msi
- Size 47.0MB
- Sample260812-vtnbgaea28
- SHA256 13afd3068f1ca5fb9c5beb1143078979b9cfc1c78b42ff2224dbefbea32efac2
- MD5 68b415ea415e1c83375a1cfc49c449d8
- SHA1 8ecf385a12492a2da9d3789ca1a7a574669536ca
- SHA512 5c2112db1fe8b7871bd11e2b5f95bea5f74fb0bc214fe6355919df2883ed77f001fabd059f81d98623cc8806f12912e70eee72eb974aa3a833fc0e2fb309b9b4
- SSDEEP 786432:rc7hCebQ+IlpPJrNOT3M7iPavwheojgvOtL3raeYoTd2rPmgvtd9hZIW0p+K8oig:ryCebQ+IlpPJrQLPlDrOCuPm4PIWzXoh
- TLSH T128B733977BB22C53C404A5BB739F9719DB221F627B1203195D24A24CCC3F9EE8B5D18A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AWSCLIV2-2.36.21.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AWSCLIV2-2.36.21.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target AWSCLIV2-2.36.21.msi
- Size 47.0MB
- SHA256 13afd3068f1ca5fb9c5beb1143078979b9cfc1c78b42ff2224dbefbea32efac2
- MD5 68b415ea415e1c83375a1cfc49c449d8
- SHA1 8ecf385a12492a2da9d3789ca1a7a574669536ca
- SHA512 5c2112db1fe8b7871bd11e2b5f95bea5f74fb0bc214fe6355919df2883ed77f001fabd059f81d98623cc8806f12912e70eee72eb974aa3a833fc0e2fb309b9b4
- SSDEEP 786432:rc7hCebQ+IlpPJrNOT3M7iPavwheojgvOtL3raeYoTd2rPmgvtd9hZIW0p+K8oig:ryCebQ+IlpPJrQLPlDrOCuPm4PIWzXoh
- TLSH T128B733977BB22C53C404A5BB739F9719DB221F627B1203195D24A24CCC3F9EE8B5D18A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.