Overview
overview
7Static
static
5Setup__en.exe
windows10-2004-x64
7Setup__en.exe
windows11-21h2-x64
7$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3ReflectVal...me.msi
windows10-2004-x64
3ReflectVal...me.msi
windows11-21h2-x64
3ReflectVal...le.msi
windows10-2004-x64
3ReflectVal...le.msi
windows11-21h2-x64
3ReflectVal...as.msi
windows10-2004-x64
3ReflectVal...as.msi
windows11-21h2-x64
3ReflectVal...lk.msi
windows10-2004-x64
3ReflectVal...lk.msi
windows11-21h2-x64
3ReflectValium/Ui.msi
windows10-2004-x64
3ReflectValium/Ui.msi
windows11-21h2-x64
3Analysis
- max time kernel
104s - max time network
105s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system - submitted
30/09/2025, 21:44
Static task
static1
Behavioral task
behavioral1
Sample
Setup__en.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral2
Sample
Setup__en.exe
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20250905-en
Behavioral task
behavioral5
Sample
ReflectValium/Genome.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
ReflectValium/Genome.msi
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
ReflectValium/Renewable.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral8
Sample
ReflectValium/Renewable.msi
Resource
win11-20250610-en
Behavioral task
behavioral9
Sample
ReflectValium/Seas.msi
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
ReflectValium/Seas.msi
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
ReflectValium/Talk.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
ReflectValium/Talk.msi
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
ReflectValium/Ui.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral14
Sample
ReflectValium/Ui.msi
Resource
win11-20250610-en
General
- Target ReflectValium/Seas.msi
- Size 292KB
- Sample250930-1lqphsvthy
- SHA256 67889375f9f1dfb62e2f503a33c518e4041f18e02e7ed10182f0de64a929c6b0
- MD5 7a932e679b0c7644716472b21c7a4bf9
- SHA1 969ae52a5ce395fcf4b17f21ea1aeb590e26882d
- SHA512 5984dad50eb7387908fc2b35c91831a8c1ecd614d48958cbad2ca726607153d9bcb157c6ce78ab9c5c1097bd696fa32fe1102a67dc99de67bd0558e0cb1cb095
- SSDEEP 6144:ZOKLQgFetFO91Bu0uNmyZygOx7xHAxDsCYFFH4t5YLZFXGi67:ZZLQ0YFOLBu9Nmys97xHUUY7OvXGr
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 3564 msiexec.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeShutdownPrivilege 3564 msiexec.exe Token: SeIncreaseQuotaPrivilege 3564 msiexec.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3564 msiexec.exe 3564 msiexec.exe