2aba1393ad9d161d34c473e633196be971ac8d13a988fb4206568d739a8b5cfb | Triage

Submit
Reports

Overview

overview

Static

static

3

net8.0-windows.rar

windows7-x64

3

net8.0-windows.rar

windows10-2004-x64

RLTool.deps.json

windows7-x64

3

RLTool.deps.json

windows10-2004-x64

3

RLTool.exe

windows7-x64

1

RLTool.exe

windows10-2004-x64

1

RLTool.exe

windows7-x64

1

RLTool.exe

windows10-2004-x64

1

RLTool.pdb

windows7-x64

3

RLTool.pdb

windows10-2004-x64

3

RLTool.run...g.json

windows7-x64

3

RLTool.run...g.json

windows10-2004-x64

3

Analysis

max time kernel
595s
max time network
600s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-10-2024 02:24

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

net8.0-windows.rar

Resource

win7-20240903-en

windows7-x64

4 signatures

600 seconds

Behavioral task

behavioral2

Sample

net8.0-windows.rar

Resource

win10v2004-20240802-en

stealerium collection discovery evasion persistence privilege_escalation ransomware spyware stealer

windows10-2004-x64

34 signatures

600 seconds

Behavioral task

behavioral3

Sample

RLTool.deps.json

Resource

win7-20240708-en

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral4

Sample

RLTool.deps.json

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

RLTool.exe

Resource

win7-20240729-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

RLTool.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

RLTool.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

RLTool.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral9

Sample

RLTool.pdb

Resource

win7-20240903-en

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral10

Sample

RLTool.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral11

Sample

RLTool.runtimeconfig.json

Resource

win7-20240903-en

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral12

Sample

RLTool.runtimeconfig.json

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

600 seconds

Report Analysis Logs

General

Target

RLTool.exe
Size

135KB
MD5

d8dd178edd900a25706432da4168433c
SHA1

6f97a417179ddcec0a90eeee4dffd76aa2602537
SHA256

1e2b6bfb5d47fef87162614b2c6e5cecd46ce78a1d5cf7ea1744bc49dde8db5f
SHA512

6f4b1e2c6c35136899f552c127d992ba30d505ba20f0d5da73801d43d1b1c0a7eb4029a544f5f5eb46a350c7555d4e6c6be6c55db33c4c6a7363f827b68857d8
SSDEEP

3072:DjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfO6hBut:DjK4TDUqgpqWDLZ5H+xuZ04FhA

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\RLTool.exe
"C:\Users\Admin\AppData\Local\Temp\RLTool.exe"
1⤵
PID:2188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1996,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
1⤵
PID:1116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4296,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=1444 /prefetch:8
1⤵
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy