Overview
overview
7Static
static
5Setup__en.exe
windows10-2004-x64
7Setup__en.exe
windows11-21h2-x64
7$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3ReflectVal...me.msi
windows10-2004-x64
3ReflectVal...me.msi
windows11-21h2-x64
3ReflectVal...le.msi
windows10-2004-x64
3ReflectVal...le.msi
windows11-21h2-x64
3ReflectVal...as.msi
windows10-2004-x64
3ReflectVal...as.msi
windows11-21h2-x64
3ReflectVal...lk.msi
windows10-2004-x64
3ReflectVal...lk.msi
windows11-21h2-x64
3ReflectValium/Ui.msi
windows10-2004-x64
3ReflectValium/Ui.msi
windows11-21h2-x64
3Analysis
- max time kernel
101s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system - submitted
30/09/2025, 21:44
Static task
static1
Behavioral task
behavioral1
Sample
Setup__en.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral2
Sample
Setup__en.exe
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20250905-en
Behavioral task
behavioral5
Sample
ReflectValium/Genome.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
ReflectValium/Genome.msi
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
ReflectValium/Renewable.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral8
Sample
ReflectValium/Renewable.msi
Resource
win11-20250610-en
Behavioral task
behavioral9
Sample
ReflectValium/Seas.msi
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
ReflectValium/Seas.msi
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
ReflectValium/Talk.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
ReflectValium/Talk.msi
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
ReflectValium/Ui.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral14
Sample
ReflectValium/Ui.msi
Resource
win11-20250610-en
General
- Target ReflectValium/Talk.msi
- Size 264KB
- Sample250930-1lqphsvthy
- SHA256 a7cc2b3de934547619563aafebd661eb0d7cd396f0243e5fcb03a5396c2f6106
- MD5 83a988b2ed6c6674d7710cd945f15d69
- SHA1 de1eb7bf13a7c41305dd25d9721e6e9f5f750204
- SHA512 d4a4d7a7e070f2db2f7775e3d20ef8c3a9c450c261a0447ad9c892810dde3bd3ce71f1cde4baaef5f2a006d96a72b001a29677b0c2ee30f2b9b7cc5f8f01625a
- SSDEEP 6144:Y0AmoSrNJ2U/0wudJcLzLkD0CHeeakfHJx9toUaDVOZPDg:OmoSxYSHrWfHJx9t+BAP0
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 2276 msiexec.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeShutdownPrivilege 2276 msiexec.exe Token: SeIncreaseQuotaPrivilege 2276 msiexec.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2276 msiexec.exe 2276 msiexec.exe