support.client.exe

Classification: Malicious

support.client.exe is a trojan (Windows executable). Detected by 37 antivirus engines. Linked to Connectwise malware.

Detection summary

  • 37 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONNECTWISE (S0591)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-06-01 08:45:05 2026-06-01 08:45:05
Generic Malware Triage 2026-06-01 07:47:33 2026-06-01 07:47:33 malicious-activity
ConnectWise MalwareBazaar Abuse.ch 2026-06-01 07:47:12 2026-06-01 07:47:12 malicious-activity S0591 ConnectWise

Tags

defense_evasion discovery revoked_codesign spyware trojan

Sample information

Filenames
support.client.exe, e7fe7fbcd7648b473caf4db264caa4b44179e391520bd72ef2263f0885c0e133.bin
File type
PE32 executable for MS Windows 5.01 (GUI), Intel i ...
MD5
f5d5aa4f63f6318325ec94bf25650bc0
SHA-1
ddd60fea095548198a715e0b7eb60ed2e7f70e49
SHA-256
e7fe7fbcd7648b473caf4db264caa4b44179e391520bd72ef2263f0885c0e133
First indexed
2026-06-01 07:47:12
Last updated
2026-10-16 05:51:52

Antivirus detections

EngineDetection
ALYacApplication.Scam.SConnect.GenericKD.782
AhnLab-V3Trojan/Win.Generic.R692620
Antiy-AVLRiskWare[RemoteAdmin]/Win32.ConnectWise
ArcabitApplication.Scam.SConnect.Generic.782
AviraAPPL/AgentW32.ToolX
BitDefenderApplication.Scam.SConnect.GenericKD.782
BkavW32.HfakespclLM.Trojan
CTXexe.trojan.connectwise
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTrojan.Siggen31.29530
Elasticmalicious (moderate confidence)
EmsisoftApplication.Scam.SConnect.GenericKD.782 (B)
F-SecureProgram.APPL/AgentW32.ToolX
FortinetRiskware/Application
GoogleDetected
JiangminRemoteAdmin.ConnectWise.s
K7AntiVirusRemoteTool ( 005ce31e1 )
K7GWRemoteTool ( 005ce31e1 )
Kasperskynot-a-virus:HEUR:RemoteAdmin.Win32.ConnectWise.gen
KingsoftWin32.HACKTOOL.RemoteAdmin.v
LionicTrojan.Win32.ConnectWise.4!c
MalwarebytesGeneric.Malware/Suspicious
MicroWorld-eScanApplication.Scam.SConnect.GenericKD.782
MicrosoftTrojan:Win32/Qwexlafiba!rfn
NANO-AntivirusTrojan.Win32.TrjGen.lhfonm
Paloaltogeneric.ml
PandaTrj/PhxBzA.A
RisingHackTool.ConnectWise!8.13A88 (TFE:5:1StHuvJzjCI)
SUPERAntiSpywareHack.Tool/Gen-Crack
SkyhighBehavesLike.Win32.Downloader.fh
TrellixENSArtemis!F5D5AA4F63F6
VBA32BScope.Trojan.Wacatac
VIPREApplication.Scam.SConnect.GenericKD.782
VaristW32/ConnectWise.M.gen!Eldorado
VirITTrojan.Win32.Genus.DLA
ZillyaTool.ConnectWise.Win32.134