General
- Target connect.msi
- Size 8.8MB
- Sample260923-xtck3sss2n
- SHA256 119a0c6959f126a8e6e2ff82ba597c95a00a2275858e03b62b110d60965bb3f3
- MD5 c142df3bb7a96a0757631aa0c42746cb
- SHA1 294277e7cb40af465584fa2304e4ae865c71d523
- SHA512 48cc5a93f976ec29e4767baab6f1f7e6a8925c8d433b34a3bfd8134d91c0211b99fcdee9a84eff906b4cc92e66246456f317e3aab969b07ae2e1cdd579180c7e
- SSDEEP 24576:gzKJVon1KJZ5I2YG/M+rWaL02LJ6VpZ+mx+TCgRwAHU7+bqUxcjZQAZMj+cppqkz:gzKrzK2YG0J4WZFYQ3SZkV5
- TLSH T1B396AC0DAB3E88975E780CD480D6B557076F6B49E217E9BDC43D605C1F0A80B91CBAAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
connect.msi
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
connect.msi
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
adaptixc2
C2
-
187.77.30.227
Attributes
-
port
5005
-
user_agent
Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0
Targets
-
- Target connect.msi
- Size 8.8MB
- SHA256 119a0c6959f126a8e6e2ff82ba597c95a00a2275858e03b62b110d60965bb3f3
- MD5 c142df3bb7a96a0757631aa0c42746cb
- SHA1 294277e7cb40af465584fa2304e4ae865c71d523
- SHA512 48cc5a93f976ec29e4767baab6f1f7e6a8925c8d433b34a3bfd8134d91c0211b99fcdee9a84eff906b4cc92e66246456f317e3aab969b07ae2e1cdd579180c7e
- SSDEEP 24576:gzKJVon1KJZ5I2YG/M+rWaL02LJ6VpZ+mx+TCgRwAHU7+bqUxcjZQAZMj+cppqkz:gzKrzK2YG0J4WZFYQ3SZkV5
- TLSH T1B396AC0DAB3E88975E780CD480D6B557076F6B49E217E9BDC43D605C1F0A80B91CBAAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.