General
- Target screenconnect.clientsetup.msi
- Size 9.8MB
- Sample260820-wvgezsshph
- SHA256 1015fa52959961c46bdade7aac39320f6294d477b057399a81112502cee13d52
- MD5 ee7bd784004ff3fe32734337d618a31c
- SHA1 842920d1654c6c1890ae4893821890a675ace949
- SHA512 9a58bf49266bfd1d33517e4cadd74675a151df155ca6cc50b1203701718e7398fd08129f55462b471d54c2d740923e28e4672944d4c00aaf4c9cc6de49138735
- SSDEEP 196608:qeq5KqDBCDkSt0QEreq5KqDBCDkSt3eq5KqDBCDkStseq5KqDBCDkSt:Hq5VDBCDx0QEKq5VDBCDxOq5VDBCDxRT
- TLSH T120A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
screenconnect.clientsetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
screenconnect.clientsetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target screenconnect.clientsetup.msi
- Size 9.8MB
- SHA256 1015fa52959961c46bdade7aac39320f6294d477b057399a81112502cee13d52
- MD5 ee7bd784004ff3fe32734337d618a31c
- SHA1 842920d1654c6c1890ae4893821890a675ace949
- SHA512 9a58bf49266bfd1d33517e4cadd74675a151df155ca6cc50b1203701718e7398fd08129f55462b471d54c2d740923e28e4672944d4c00aaf4c9cc6de49138735
- SSDEEP 196608:qeq5KqDBCDkSt0QEreq5KqDBCDkSt3eq5KqDBCDkStseq5KqDBCDkSt:Hq5VDBCDx0QEKq5VDBCDxOq5VDBCDxRT
- TLSH T120A6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.