MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 67624862db40b3e12242a34d2df0b7fa7cbec4661b6456dc8f773fce4817b10a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	67624862db40b3e12242a34d2df0b7fa7cbec4661b6456dc8f773fce4817b10a
SHA3-384 hash:	e1daff4036bce6ac69062cde1ef9ed92e68edd598fa014566d0a923ba5a9d41e3234a5b19763bf2d103c0f5052bb1593
SHA1 hash:	7836a9663dce52061d2b74c53dcdca01be748c47
MD5 hash:	34d6286bbddbf926bfff099a3c0fc187
humanhash:	undress-california-muppet-victor
File name:	DashConnect-2.2.0.msi
Download:	download sample
File size:	113'025'065 bytes
First seen:	2026-10-05 18:09:51 UTC
Last seen:	Never
File type:	msi
MIME type:	application/x-msi
ssdeep	1572864:Qz73TbGd+sNiWYZ4U7sMTuTstkM0TJ1sFKUC6t8ogkJV7pSsU1AZBfi+7LrXptHv:QzrTqvizZaXjxKbpSnei+7THGL7rWBfd
TLSH	T18E4833247806CB13F215E2B5D63BBB1CC7813A50ABD5D8CB1517F9196CB3AA067B821F
TrID	79.6% (.MSI) Microsoft Windows Installer (454500/1/170) 10.6% (.MST) Windows SDK Setup Transform script (61000/1/5) 7.8% (.MSP) Windows Installer Patch (44509/10/5) 1.4% (.) Generic OLE2 / Multistream Compound (8000/1) 0.4% (.ASSETS) Unity binary serialized Assets (generic) (2509/3/1)
Magika	msi
Reporter	Alex_sev
Tags:	agent Downloader Generic kryptik msi Patched

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

194

Origin country :

CH

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad0bd8e6f551121ba15fbcc

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/67624862db40b3e12242a34d2df0b7fa7cbec4661b6456dc8f773fce4817b10a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

msi

First seen:

2026-09-23T11:26:00Z UTC

Last seen:

2026-10-06T19:45:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/67624862db40b3e12242a34d2df0b7fa7cbec4661b6456dc8f773fce4817b10a/results?tab=lookup

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Suschil

Threat name:

Win32.Trojan.Suschil

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-09-20 21:14:11 UTC

File Type:

Binary (Archive)

Extracted files:

3519

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=m5reqyw3icz6ciscungs34fx7j6l5rdgdnsfnxepo4744saxwefa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

persistence privilege_escalation ransomware

Link:

https://tria.ge/reports/261005-wse45s1xhv/

Behaviour

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Uses Volume Shadow Copy service COM API

Event Triggered Execution: Installer Packages

Drops file in Program Files directory

Drops file in Windows directory

Enumerates connected drives

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.