Overview
overview
7Static
static
5Setup__en.exe
windows10-2004-x64
7Setup__en.exe
windows11-21h2-x64
7$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3ReflectVal...me.msi
windows10-2004-x64
3ReflectVal...me.msi
windows11-21h2-x64
3ReflectVal...le.msi
windows10-2004-x64
3ReflectVal...le.msi
windows11-21h2-x64
3ReflectVal...as.msi
windows10-2004-x64
3ReflectVal...as.msi
windows11-21h2-x64
3ReflectVal...lk.msi
windows10-2004-x64
3ReflectVal...lk.msi
windows11-21h2-x64
3ReflectValium/Ui.msi
windows10-2004-x64
3ReflectValium/Ui.msi
windows11-21h2-x64
3Analysis
- max time kernel
103s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20250610-en - resource tags
arch:x64arch:x86image:win10v2004-20250610-enlocale:en-usos:windows10-2004-x64system - submitted
30/09/2025, 21:44
Static task
static1
Behavioral task
behavioral1
Sample
Setup__en.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral2
Sample
Setup__en.exe
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20250905-en
Behavioral task
behavioral5
Sample
ReflectValium/Genome.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
ReflectValium/Genome.msi
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
ReflectValium/Renewable.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral8
Sample
ReflectValium/Renewable.msi
Resource
win11-20250610-en
Behavioral task
behavioral9
Sample
ReflectValium/Seas.msi
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
ReflectValium/Seas.msi
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
ReflectValium/Talk.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
ReflectValium/Talk.msi
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
ReflectValium/Ui.msi
Resource
win10v2004-20250610-en
Behavioral task
behavioral14
Sample
ReflectValium/Ui.msi
Resource
win11-20250610-en
General
- Target ReflectValium/Genome.msi
- Size 25KB
- Sample250930-1lqphsvthy
- SHA256 745b4832575e548f0eac5f4b3c11a3e8a930f90027a820d9dd337b840fd76a36
- MD5 316d2509869f71201bd392c02b5a97cd
- SHA1 c6998cb77923c0d18ed83fdfa08dbba60bdea179
- SHA512 8447cb9f75ea47b2b4010720c711e77a10306d00270ca544156a0475948efd58a0374fea7b3bd93fe74c34c7d3d49c9f27bb46b5972e74951caf027edb201317
- SSDEEP 384:vCF3BKfcBi8G/UJhm3khVfKqLOD47EY7FHV1oM2e6aDm/X+Warh4yGJYmGNK7Tg:s3Bvk8CoJVfugX7FHV1F2e6aDgOW8Vvb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 4816 msiexec.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeShutdownPrivilege 4816 msiexec.exe Token: SeIncreaseQuotaPrivilege 4816 msiexec.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4816 msiexec.exe 4816 msiexec.exe