Analysis
- max time kernel
101s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
- submitted
30/09/2025, 21:44
General
- Target ReflectValium/Renewable.msi
- Size 216KB
- Sample250930-1lqphsvthy
- SHA256 be6762bc58a99c911b288a3a32e64d77e859d558a9a11f7ee3a6ead5a2a8ec5b
Score
3/10
Malware Config
Signatures
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\ReflectValium\Renewable.msi1⤵
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow