General
- Target ConnectWiseControl.ClientSetup.msi
- Size 1.5MB
- Sample261011-skranaca33
- SHA256 7e156776064bbc27cdf59cd6bd1f30298d7fc7b2d14ebf5dc2c39703065a6077
- MD5 a6ea1af8ac52d4e7eabb26c1f1aa2eaa
- SHA1 835c2ef8bc53d91fd1dc2bd743434800a27f61cf
- SHA512 56aa23747126b7cad6f73801e27acba4a50f79a852832a8066a7174a08a9f9ed19e3cf030d6b59f2e83e7e4327f604b8aab1eff312265ac8ba2a68de171fb432
- SSDEEP 24576:+ZPlmF0uwTKh56Z5vePu/DVeL1pVjeOTnUUGGu/aYmQurhwQUvJ:Emh69eWbVypVCEgGu/aYmn1gJ
- TLSH T16475012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ConnectWiseControl.ClientSetup.msi
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ConnectWiseControl.ClientSetup.msi
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ConnectWiseControl.ClientSetup.msi
- Size 1.5MB
- SHA256 7e156776064bbc27cdf59cd6bd1f30298d7fc7b2d14ebf5dc2c39703065a6077
- MD5 a6ea1af8ac52d4e7eabb26c1f1aa2eaa
- SHA1 835c2ef8bc53d91fd1dc2bd743434800a27f61cf
- SHA512 56aa23747126b7cad6f73801e27acba4a50f79a852832a8066a7174a08a9f9ed19e3cf030d6b59f2e83e7e4327f604b8aab1eff312265ac8ba2a68de171fb432
- SSDEEP 24576:+ZPlmF0uwTKh56Z5vePu/DVeL1pVjeOTnUUGGu/aYmQurhwQUvJ:Emh69eWbVypVCEgGu/aYmn1gJ
- TLSH T16475012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.