Overview

overview

7

Static

static

3

RSI-Setup-2.0.0.exe

windows10-2004-x64

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows10-2004-x64

1

RSI Launcher.exe

windows10-2004-x64

5

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

7

resources/elevate.exe

windows10-2004-x64

1

resources/...rt.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$R0/Uninst...er.exe

windows10-2004-x64

4

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/VC_r...64.exe

windows10-2004-x64

7

$TEMP/dotN...up.exe

windows10-2004-x64

7

$TEMP/dxwebsetup.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    59s
  • max time network
    73s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 03:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/elevate.exe

  • Size

    125KB

  • MD5

    8e8b377e679df17e681d41a6a4c47387

  • SHA1

    5ed64822bef831ff019d7e98e53bc75b98e232c3

  • SHA256

    cb31e0fe75fa750aa5d094154ee3ee9a0a7b64adfee814520d618c29854795c3

  • SHA512

    0a88456d7d9e2744be9328f37733861c184f84d7f2296c539c5b2d1995923bc296d79a67b1b321dfa341269e165830c378e2fb138ac01fadd657215eea73c404

  • SSDEEP

    3072:9FbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlnVHhZm:/PrwRhte1XsE1lVzm

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"
    1⤵
      PID:5108

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads