Overview

overview

7

Static

static

3

Rte.exe

windows10-2004-x64

7

Rte.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/04/2026, 03:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Rte.exe
  • Size 4.9MB
  • Sample260417-ej877ahy7s
  • SHA256 305ba16025064485548edb35da0fefdf347766ccfc2c1276eaef8bcdeb945fd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\Rte.exe
    "C:\Users\Admin\AppData\Local\Temp\Rte.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:1076

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        185c595807783fcc545761e23f9d243c.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\185c595807783fcc545761e23f9d243c.dll
        • Size 28KB
        • SHA256 3244d88fc6f38aae1742c480d025a2f778d15a20d69230c33727ac0a32e77042
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6342697e83e75eb3b87508b1932bf7ae.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\6342697e83e75eb3b87508b1932bf7ae.dll
        • Size 28KB
        • SHA256 280248d586502cea4b3ea78c4ce796033cddc8f9dbf1b200ddd5d0cbba40a785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7abef1ff6153b6c5107d9d83c6143098.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\7abef1ff6153b6c5107d9d83c6143098.dll
        • Size 20KB
        • SHA256 05962fb167abdd0e4373b73c935d2a6f62b195864207847fbb906d68aabbcbb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        803e35341d8537809fd968b6b10205fc.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\803e35341d8537809fd968b6b10205fc.dll
        • Size 76KB
        • SHA256 f2c312cd047ac6338cc5d67f8972d94829183a9f5f37bb16e58e9bc2849f0301
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        81c05f3b2acdfe5a5309eea0ccd27805.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\81c05f3b2acdfe5a5309eea0ccd27805.dll
        • Size 24KB
        • SHA256 54cd6552459daaab6e2957ee62999fcb6640cf7912f68c6b55ce83c84acc17d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        98495d483a1f63f573a73de2705e5d5e.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\98495d483a1f63f573a73de2705e5d5e.dll
        • Size 56KB
        • SHA256 f7b8710f4309ecfffab9f144624257a108a0ef1c4d6422d07b85da80019b9656
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        b4c990805a9b165b7b4d21f1490cc024.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\b4c990805a9b165b7b4d21f1490cc024.dll
        • Size 32KB
        • SHA256 d171b0862ec7ac89e39c616ad7c02653664e9889dfbe83df34f033aa29abbe77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        b8237d7b0899216f7459193d1296ebfe.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\b8237d7b0899216f7459193d1296ebfe.dll
        • Size 132KB
        • SHA256 43b5353aa515544334cfdaf89ad224d0c1e543c236ceddbae25f6a344be821a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d003fa877243d832acb5367ddd14ed85.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\d003fa877243d832acb5367ddd14ed85.dll
        • Size 24KB
        • SHA256 24f977d5b84eb75ebfe9cbf7f9f89b0af9cdd5c7459009e134f2449647948fa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        perl58.dll
        • Path C:\Users\Admin\AppData\Local\Temp\pdk-Admin\f78fb8d8687ebf23fa336cfb0986710a\perl58.dll
        • Size 784KB
        • SHA256 640bb92f6fc675c41df43c097db4556e1af106fba845a218472a125401345fa4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1076-29-0x0000000003990000-0x00000000039B1000-memory.dmp
        Download

        memory/1076-21-0x0000000003970000-0x0000000003983000-memory.dmp
        Download

        memory/1076-65-0x0000000003CB0000-0x0000000003CBE000-memory.dmp
        Download