General
- Target NetExtender-10.2.0.292.MSI
- Size 13.6MB
- Sample261102-ncvkwsbt9k
- SHA256 6272928ceabed46f9141fd87955bc25e66e3b907ed3bc3c27439b2714de81d3e
- MD5 5172bbb232beea0b30903f790ad1002e
- SHA1 cf77d4c9b0ba3c4ef975892c2c72b27be491fdec
- SHA512 10171862e9c4a2cdc796269115ce52eb59a095798bcf96427527b27f452237bcefaf0a6c293f3315b530bd625db7d17dcff979e8e34c6865920295f7adce9c7f
- SSDEEP 196608:imfXOhVwrl0bP0f7CIrf7K2LB7RbHhR3asX2x3t4JmAtDqNSJ5qRZz6xw:3fXOorcQ7b7JdVbBh84Jm2DqNW5quG
- TLSH T1E8E6C0C57A684075C5FB8234A917A22BF6FABC110B71C6DF52A8774D2F373D14A29322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NetExtender-10.2.0.292.msi
Resource
win10v2004-20260911-en
14 signatures
40 seconds
Behavioral task
behavioral2
Sample
NetExtender-10.2.0.292.msi
Resource
win11ltsc2024-20260911-en
10 signatures
40 seconds
Malware Config
Targets
-
- Target NetExtender-10.2.0.292.MSI
- Size 13.6MB
- SHA256 6272928ceabed46f9141fd87955bc25e66e3b907ed3bc3c27439b2714de81d3e
- MD5 5172bbb232beea0b30903f790ad1002e
- SHA1 cf77d4c9b0ba3c4ef975892c2c72b27be491fdec
- SHA512 10171862e9c4a2cdc796269115ce52eb59a095798bcf96427527b27f452237bcefaf0a6c293f3315b530bd625db7d17dcff979e8e34c6865920295f7adce9c7f
- SSDEEP 196608:imfXOhVwrl0bP0f7CIrf7K2LB7RbHhR3asX2x3t4JmAtDqNSJ5qRZz6xw:3fXOorcQ7b7JdVbBh84Jm2DqNW5quG
- TLSH T1E8E6C0C57A684075C5FB8234A917A22BF6FABC110B71C6DF52A8774D2F373D14A29322
- MD5 SHA1 SHA512 SSDEEP TLSH
Loads dropped DLL
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.