General
- Target NetExtender-10.2.0.299.MSI
- Size 13.6MB
- Sample261102-ndmaxabt9n
- SHA256 8c7966cc31ae959e7487548bb771a6dd99af42b134ab612bb09a428020eda35b
- MD5 514d88ce601d6727c6c0e8659f377629
- SHA1 7eacb42e65756fdf4bc5a86678ed6c42753a383d
- SHA512 7aa8887e63ee59bfbcceac1c63b8599af4493d3f4ff7560b4194f9c29b55cbd376c9e3a0552757f703ae133f7e2a856571dafa5fcc770e1ec009e95a3c95433c
- SSDEEP 196608:S5ubQO/AHSf7+IrfPK2LB7RbHhR3asX2xuU4JmAtDqNSJ5qRZzfx:0O/AH67nPJdVbBhW4Jm2DqNW5qT
- TLSH T1DBE6C0C57A584075C5FB8234A90BA62BF6FABC110B71C6DF52A8774D2F373D14A29322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NetExtender-10.2.0.299.msi
Resource
win10v2004-20260911-en
14 signatures
40 seconds
Behavioral task
behavioral2
Sample
NetExtender-10.2.0.299.msi
Resource
win11ltsc2024-20260911-en
10 signatures
40 seconds
Malware Config
Targets
-
- Target NetExtender-10.2.0.299.MSI
- Size 13.6MB
- SHA256 8c7966cc31ae959e7487548bb771a6dd99af42b134ab612bb09a428020eda35b
- MD5 514d88ce601d6727c6c0e8659f377629
- SHA1 7eacb42e65756fdf4bc5a86678ed6c42753a383d
- SHA512 7aa8887e63ee59bfbcceac1c63b8599af4493d3f4ff7560b4194f9c29b55cbd376c9e3a0552757f703ae133f7e2a856571dafa5fcc770e1ec009e95a3c95433c
- SSDEEP 196608:S5ubQO/AHSf7+IrfPK2LB7RbHhR3asX2xuU4JmAtDqNSJ5qRZzfx:0O/AH67nPJdVbBhW4Jm2DqNW5qT
- TLSH T1DBE6C0C57A584075C5FB8234A90BA62BF6FABC110B71C6DF52A8774D2F373D14A29322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.