General
- Target ScreenConnect.ClientSetup.msi
- Size 11.8MB
- Sample260907-ppjjtsaj61
- SHA256 f6b6a2a43194f14e289d5ba8560fd0112c158e6d3c9ad60209573c9eff2388d3
- MD5 f6d68ad19e372b102f27394332e730d9
- SHA1 268f66626fe3ad8008cd51ef5176ebcc69f4dfc5
- SHA512 1f25ff43d2c3f4a9f238041ff923b9205a713ec4b67778b42dc338ac747c2b76e6da7f315d7a7480dad6b228550c7635a3a2774effa4308b7ef014f10613a938
- SSDEEP 98304:nMn1Giy8E1PqhFG6ztZNK9aNGTMn1Giy8E1PqhiMn1Giy8E1PqhPMn1Giy8E1Pq1:GZWidz3I96TZWiNZWiOZWiNZWi
- TLSH T1B3C6232117FAC0A8F1B61B71D93C65B5A936BD12D622844F1354BE6E3C32F949A32373
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 11.8MB
- SHA256 f6b6a2a43194f14e289d5ba8560fd0112c158e6d3c9ad60209573c9eff2388d3
- MD5 f6d68ad19e372b102f27394332e730d9
- SHA1 268f66626fe3ad8008cd51ef5176ebcc69f4dfc5
- SHA512 1f25ff43d2c3f4a9f238041ff923b9205a713ec4b67778b42dc338ac747c2b76e6da7f315d7a7480dad6b228550c7635a3a2774effa4308b7ef014f10613a938
- SSDEEP 98304:nMn1Giy8E1PqhFG6ztZNK9aNGTMn1Giy8E1PqhiMn1Giy8E1PqhPMn1Giy8E1Pq1:GZWidz3I96TZWiNZWiOZWiNZWi
- TLSH T1B3C6232117FAC0A8F1B61B71D93C65B5A936BD12D622844F1354BE6E3C32F949A32373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.