ScreenConnect.ClientSetup.exe

Classification: Malicious

ScreenConnect.ClientSetup.exe is a malicious file sample (Windows executable). Linked to Connectwise malware.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONNECTWISE (S0591)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
NetWire RC ThreatFox Abuse.ch 2026-10-17 15:32:30 2026-10-17 16:25:05 malicious-activity
Generic Malware Hybrid-Analysis 2026-10-17 10:45:04 2026-10-17 10:45:04 malicious-activity
Suspicious Sample Triage 2026-10-17 09:55:17 2026-10-17 09:55:17 anomalous-activity
ConnectWise MalwareBazaar Abuse.ch 2026-10-17 09:54:49 2026-10-17 09:54:49 malicious-activity S0591 ConnectWise

Tags

evasive discovery ransomware revoked_codesign win.netwire netweird netwire recam

Sample information

Filenames
ScreenConnect.ClientSetup.exe, 4f3ac1ab04e715991704cf687540b7aca1143b321a1b0aa189701a9448cd2e58.exe
File type
PE32 executable for MS Windows 5.01 (GUI), Intel i ...
MD5
96bcdbf175c237e75c424d075b7ac4e4
SHA-1
94926f93100fdd787363def3a5b3a8a663f362f8
SHA-256
4f3ac1ab04e715991704cf687540b7aca1143b321a1b0aa189701a9448cd2e58
First indexed
2026-10-17 09:54:49
Last updated
2026-10-17 16:25:05