Resubmissions
20/05/2026, 05:44
260520-ge7jxaaz6q28/04/2026, 01:37
260428-b182zafv9n528/04/2026, 01:23
260428-br81lsft8l5Analysis
- user interaction
yes - max time kernel
598s - max time network
457s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/04/2026, 01:23
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Rsdest.exe
Resource
win11-20260130-en
0 signatures
600 seconds
General
- Target Rsdest.exe
- Size 458KB
- Sample260428-br81lsft8l
- SHA256 3ad4c4e505aa38ef25817f6e750d7c32023a79fe710c93cf4789f01cb7a7b814
- MD5 096b50b848114eb568e86c9e582e70b4
- SHA1 0b678f91b84cd9c82229fd24155f523845073f93
- SHA512 bbbcb9ea6b3edbdda64b0b1b7dba189c4162ab37b92dadfe3e68daf0823e974bea152eb747d384fcc20330a697fe250539669bfae59598c660457e6d76931404
- SSDEEP 6144:PnsyV/oPLSFqKNe+HHMYJQ3CUEYe29BprFHV2zQawWMo:5V/GLSFqKNe+HHM/BE4yMo
- TLSH T1E3A4F811EBE88777E0B26235C9B281E4AA337C999931C64F3158B91E3F7B6508DF4721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"1⤵PID:2008
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4516
-
C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"1⤵PID:3532
-
C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"C:\Users\Admin\AppData\Local\Temp\Rsdest.exe"1⤵PID:3632