Analysis
- max time kernel
899s - max time network
592s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 01:03
Static task
static1
Behavioral task
behavioral1
Sample
rbx_extension_rat.zip
Resource
win10v2004-20260513-en
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
rbx_extension_rat.zip
Resource
win11ltsc2024-20260618-en
0 signatures
900 seconds
General
- Target rbx_extension_rat.zip
- Size 1.9MB
- Sample260628-bep2zaex4y
- SHA256 fbd460c81e0f06906e56a68891c2d0ec60dc2aa715d171828a1241dd14ab06d2
- MD5 2d0800031a4cc92b5fa517853044f0d4
- SHA1 97e58af142d3e8b04179e08144686a6a13975ad8
- SHA512 0833feac54345e82d634ae6866e09899b3a7369a35a2f3aeb6e586366d377665aaba8b89636f261b728bb235c456a714e4e30dfc4b23df89c7ae6be25445a6a4
- SSDEEP 49152:lBeGVnoUznoUdokLSX5p7LmZUi5IFfDmqnSLPtQeNIGaIwUipsnedT2D:n8UMUdokLSX5p7S2QIF6qSLPtQe2GaIH
- TLSH T122953347989CA5E1C3177E70AB8805FB29519D2DB9F74134A814F9FF28E03762297EE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\rbx_extension_rat.zip1⤵PID:5032
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1184
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5976