General
- Target AWSCLIV2-User-2.36.25.msi
- Size 47.1MB
- Sample260819-aj7bdavxcv
- SHA256 9ac28b2e03fd512b2fe6afd7de3a3158a1e29a52c15749e9ee64ba81165e8862
- MD5 5d03d4a5c7fdd08d4ae68e6c1fcd8586
- SHA1 acfc51b36c36afd475ac5259668101140788f2d0
- SHA512 633a0c4d8b26fc4c7dfba8db4cda5317b13fef7a0323ef8e9100865d927934a4c0215d7a83fde0c5da33e01878d7eeb98c30998df7a37592d7b62029a9ca3982
- SSDEEP 786432:p7hCebEyIlRPUH8LNyT3M/4T9Ofv1HxF1gplwCHaR4PO/jLEMv43t2TrR6HF+KgN:zCebEyIlRPUH8LMzTElRFc+rLEnATrvC
- TLSH T131B733D67BF22C5BC40EE13B939297059B6B0F703B2213155D24A67CAC3F1E90A795CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AWSCLIV2-User-2.36.25.msi
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
AWSCLIV2-User-2.36.25.msi
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target AWSCLIV2-User-2.36.25.msi
- Size 47.1MB
- SHA256 9ac28b2e03fd512b2fe6afd7de3a3158a1e29a52c15749e9ee64ba81165e8862
- MD5 5d03d4a5c7fdd08d4ae68e6c1fcd8586
- SHA1 acfc51b36c36afd475ac5259668101140788f2d0
- SHA512 633a0c4d8b26fc4c7dfba8db4cda5317b13fef7a0323ef8e9100865d927934a4c0215d7a83fde0c5da33e01878d7eeb98c30998df7a37592d7b62029a9ca3982
- SSDEEP 786432:p7hCebEyIlRPUH8LNyT3M/4T9Ofv1HxF1gplwCHaR4PO/jLEMv43t2TrR6HF+KgN:zCebEyIlRPUH8LMzTElRFc+rLEnATrvC
- TLSH T131B733D67BF22C5BC40EE13B939297059B6B0F703B2213155D24A67CAC3F1E90A795CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.