General
- Target ScreenConnect.ClientSetup.msi
- Size 12.0MB
- Sample261022-tkrf4afz5p
- SHA256 3fc5f4977a56aeb32d499a5b8d92c5c8faa97dec80fcffb29db592fa03543bb9
- MD5 6b62b1d8cd98918113094252173d2170
- SHA1 d6b93f573a712554fb264c0a75e490490f0acb83
- SHA512 cc8895aadcbfc1c1d2e036904e827b9764278124f9fabe0b5bcfd71133b49a04455837305fb26934bc2bb38d49fd9003a14a40301e3e0da839374c60672f4ab7
- SSDEEP 98304:aMn1Giy8E1PqhMG6ztZNK9aNGKMn1Giy8E1PqhjMn1Giy8E1Pqh+Mn1Giy8E1PqG:FZWiSz3I96oZWiCZWipZWiIZWi
- TLSH T1F3C6232127FA8098F1F71B31ED3965A6A836BD16DA21C05F13647E5E2C32F949972333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ScreenConnect.ClientSetup.msi
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScreenConnect.ClientSetup.msi
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenConnect.ClientSetup.msi
- Size 12.0MB
- SHA256 3fc5f4977a56aeb32d499a5b8d92c5c8faa97dec80fcffb29db592fa03543bb9
- MD5 6b62b1d8cd98918113094252173d2170
- SHA1 d6b93f573a712554fb264c0a75e490490f0acb83
- SHA512 cc8895aadcbfc1c1d2e036904e827b9764278124f9fabe0b5bcfd71133b49a04455837305fb26934bc2bb38d49fd9003a14a40301e3e0da839374c60672f4ab7
- SSDEEP 98304:aMn1Giy8E1PqhMG6ztZNK9aNGKMn1Giy8E1PqhjMn1Giy8E1Pqh+Mn1Giy8E1PqG:FZWiSz3I96oZWiCZWipZWiIZWi
- TLSH T1F3C6232127FA8098F1F71B31ED3965A6A836BD16DA21C05F13647E5E2C32F949972333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.