Resubmissions

04/11/2026, 16:17

261104-trvgbsxz5p8

04/11/2026, 16:06

261104-tkcmyady5n8

General

  • Target
    ScreenConnect.ClientSetup.exe
  • Size 12.2MB
  • Sample261104-tkcmyady5n
  • SHA256 09bb80f9231f429981e7639eb11aa7c3eca2af6b480c0de4908a588cca316c2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ScreenConnect.ClientSetup.exe
    .exe 12.2MB

ScreenConnect.ClientSetup.exe

  • IMPHASH 9771ee6344923fa220489ab01239bdfd
  • SHA256 09bb80f9231f429981e7639eb11aa7c3eca2af6b480c0de4908a588cca316c2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:db:36:e8:84:a9:94:e3:fe:08:d8:c2:fa:8f:c7:75:3d:c1:33:55:c7:9d:b6:b3:0f:e5:f7:ae:85:9c:86:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=ConnectWise\, LLC,O=ConnectWise\, LLC,L=Tampa,ST=Florida,C=US
Minor OS version
1
Major OS version
5
Entry point
5293
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb