General
- Target ConnectWiseControl.ClientSetup.msi
- Size 1.5MB
- Sample261012-xesnrayzbt
- SHA256 d0ee8d45f788c00f47d3c448d323cadcb4c5747b763f0cb0c8f85a4036818775
- MD5 dc8a934f4f41871768641ab0a519ba48
- SHA1 3f505134af294d467f8e12e3e589ef32f609364d
- SHA512 73ca71f79ccf7d8a8a20b8328c28debe87cb7bd3611348dca5f13cc61f7740d360fa119fc0e925d17cbc0efa7ebbae8e202b50cedbae3e99f7657db19e4c629b
- SSDEEP 24576:pZPlmF0uwTKh56Z5vePu/DVeL1pVjeOLnUUGGu/aYmQurhwQUvr:dmh69eWbVypVCYgGu/aYmn1gr
- TLSH T1BF75012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ConnectWiseControl.ClientSetup.msi
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ConnectWiseControl.ClientSetup.msi
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ConnectWiseControl.ClientSetup.msi
- Size 1.5MB
- SHA256 d0ee8d45f788c00f47d3c448d323cadcb4c5747b763f0cb0c8f85a4036818775
- MD5 dc8a934f4f41871768641ab0a519ba48
- SHA1 3f505134af294d467f8e12e3e589ef32f609364d
- SHA512 73ca71f79ccf7d8a8a20b8328c28debe87cb7bd3611348dca5f13cc61f7740d360fa119fc0e925d17cbc0efa7ebbae8e202b50cedbae3e99f7657db19e4c629b
- SSDEEP 24576:pZPlmF0uwTKh56Z5vePu/DVeL1pVjeOLnUUGGu/aYmQurhwQUvr:dmh69eWbVypVCYgGu/aYmn1gr
- TLSH T1BF75012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.