General
- Target $RTSELRD.msi
- Size 71.6MB
- Sample260630-ceq5psc17k
- SHA256 9e3d6c43bdcb602a8c70761df783c28f20380237c37865e183e946b100b2aa6a
- MD5 9429d6a542ad7d1c9bd53600fb1f64bd
- SHA1 4c893d03dcc470d8b926d276fe675ec84e45ab30
- SHA512 660b1fd24798dbb423ecfd92f5e1766e5509e4e53fbd47cc9c79d184f3f6e17a2597a7fa09e54599c9fcc610ebfdbb283b1032adc768cc982a4a92a5045caf41
- SSDEEP 1572864:+SZm7O3jPaLd4bN4LZAw5GGxITqLAVrPtDJw+CTRbdO8iUBYNzu44PK:D6Cj6d4bNIZAwcGxiqLMtDK+gdO8hBS9
- TLSH T123F7339FB8089C63D69D043E993BAB3BF2500DF37700056160A37D9EDC7565A4BAD29C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
$RTSELRD.msi
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
$RTSELRD.msi
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target $RTSELRD.msi
- Size 71.6MB
- SHA256 9e3d6c43bdcb602a8c70761df783c28f20380237c37865e183e946b100b2aa6a
- MD5 9429d6a542ad7d1c9bd53600fb1f64bd
- SHA1 4c893d03dcc470d8b926d276fe675ec84e45ab30
- SHA512 660b1fd24798dbb423ecfd92f5e1766e5509e4e53fbd47cc9c79d184f3f6e17a2597a7fa09e54599c9fcc610ebfdbb283b1032adc768cc982a4a92a5045caf41
- SSDEEP 1572864:+SZm7O3jPaLd4bN4LZAw5GGxITqLAVrPtDJw+CTRbdO8iUBYNzu44PK:D6Cj6d4bNIZAwcGxiqLMtDK+gdO8hBS9
- TLSH T123F7339FB8089C63D69D043E993BAB3BF2500DF37700056160A37D9EDC7565A4BAD29C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1