General
- Target AWSCLIV2-2.36.41.msi
- Size 47.2MB
- Sample260909-wgbbtadb32
- SHA256 59b2ba5a34ca54e7831621491d5e4ee7ed9bae4c12c43973ada524a8c6deb1fd
- MD5 28311cadd16aac37edef14e0afeda81c
- SHA1 0de911c9aaf612ea6af4affb0f72b8af842cf075
- SHA512 4fd7ab7e7d52f961a4b3a97d886148af118fc7fdbe7990553dd9a654df94a577c25717fd534201d58c9879bb1e8b053dbbd37b635c66e160660015e467596bef
- SSDEEP 786432:0XyvXuBbDrtclRPZMCqAnNsBH3qYLASlv24/E/o1Y00o0kyzvvpCQF84ev8gFOOc:LXCbVclRPZMdAnCfPMKvwtNfm4TJrjrY
- TLSH T1AEB733A67B732C73C40DE13B639357139F231EA13B8283155E29E25C4E3D6ED0A599CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
AWSCLIV2-2.36.41.msi
Resource
win10v2004-20260513-en
5 signatures
180 seconds
Behavioral task
behavioral2
Sample
AWSCLIV2-2.36.41.msi
Resource
win11ltsc2024-20260710-en
14 signatures
180 seconds
Malware Config
Targets
-
- Target AWSCLIV2-2.36.41.msi
- Size 47.2MB
- SHA256 59b2ba5a34ca54e7831621491d5e4ee7ed9bae4c12c43973ada524a8c6deb1fd
- MD5 28311cadd16aac37edef14e0afeda81c
- SHA1 0de911c9aaf612ea6af4affb0f72b8af842cf075
- SHA512 4fd7ab7e7d52f961a4b3a97d886148af118fc7fdbe7990553dd9a654df94a577c25717fd534201d58c9879bb1e8b053dbbd37b635c66e160660015e467596bef
- SSDEEP 786432:0XyvXuBbDrtclRPZMCqAnNsBH3qYLASlv24/E/o1Y00o0kyzvvpCQF84ev8gFOOc:LXCbVclRPZMdAnCfPMKvwtNfm4TJrjrY
- TLSH T1AEB733A67B732C73C40DE13B639357139F231EA13B8283155E29E25C4E3D6ED0A599CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.