General
- Target Rift-2.2.1.0.zip
- Size 55.7MB
- Sample260731-vtfxdsyvdv
- SHA256 0a69a9e5c5663b4c4c8ef1131ad1002235502ada42ef1399211f04cda4c0931f
- MD5 a7bab18d1553ba60bac96ea41e466c7f
- SHA1 f7de3b0b5c2ae69e91d193cc40b8ec8efaf8b32f
- SHA512 d309f7fe6052747b96e2ade993c28130352312f5c5ca94e457a397f89815ece2f262d51385b521f8e62f4d744d60bc3ec9117148d36f6dfc80e7e0b3eb8e21a0
- SSDEEP 1572864:kgueqeUrzAug96NS7nqPlJuRljO+kcgQUg96NS7nqPl2wo5K:bdUfAuMOS7qPXu7jRkVQUMOS7qP9
- TLSH T186D73325652E50D0F8DA6FB800C52BC7E37E7157334DC24208A4513B2E67BEA6BEB617
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Rift-2.2.1.0/Rift.exe
Resource
win11-20260513-en
27 signatures
150 seconds
Malware Config
Targets
-
- Target Rift-2.2.1.0/Rift.exe
- Size 279KB
- SHA256 9b2661b1eefc555a5ccacc9eef7285d3fe288e71d75351eb2e7b4f4fcba9b945
- MD5 53079cfec7e72232789416f1adb5e41e
- SHA1 7f9099600f8bd745cf020a93ae3c4b9278624a8e
- SHA512 e752de02a5b8be11dd243c9eed341247b0a3302b42371a6e51932c64855dcc428e2ffd2076b9a7faa798c6544884576b0df23b82784d09f5b9f0479bd47624ba
- SSDEEP 3072:D6eSqsywT/IiODn5Ikt8pKO9WpheWyutIRMQc59uxmZx:DLDn5I7p8hen2n
- TLSH T18154D407A3A90CFCF0A2A53888A24A45E3777C154BB157CF0354622E5EB66D39FF5B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1