General
- Target RLBotGUI.msi
- Size 22.5MB
- Sample260809-rx7mqsgn3x
- SHA256 db94135a654eb737df7e84a2c145755006859b0318f54830d155e49d7deecd8e
- MD5 3630a2074d466b46687ff9d8c8dab4a8
- SHA1 da21db383e4d76686f97ae7644f01af796ce85cc
- SHA512 44548fe7b8419254fb5887116a7b596da76b1e5bc3199e1292235087d0e7ce2e5eab663c21f6c17fe792e5f198ea1ddd0268d31a1bbc1a3fbfb73e4c15fad9fb
- SSDEEP 393216:/L6KytrrxzxiLSlnh6Cqu46LL4lSxeUUGGWE2UkpN8tQ6a6ITngx7746y3af:uKyHzTln0Tur/4lRUJUntQFTgVdm
- TLSH T175373304744F1677FF4E1DBA159F2E2CCB362E628A3456E3A228F32D12FD0659BB2115
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RLBotGUI.msi
Resource
win11-20260513-en
23 signatures
300 seconds
Malware Config
Targets
-
- Target RLBotGUI.msi
- Size 22.5MB
- SHA256 db94135a654eb737df7e84a2c145755006859b0318f54830d155e49d7deecd8e
- MD5 3630a2074d466b46687ff9d8c8dab4a8
- SHA1 da21db383e4d76686f97ae7644f01af796ce85cc
- SHA512 44548fe7b8419254fb5887116a7b596da76b1e5bc3199e1292235087d0e7ce2e5eab663c21f6c17fe792e5f198ea1ddd0268d31a1bbc1a3fbfb73e4c15fad9fb
- SSDEEP 393216:/L6KytrrxzxiLSlnh6Cqu46LL4lSxeUUGGWE2UkpN8tQ6a6ITngx7746y3af:uKyHzTln0Tur/4lRUJUntQFTgVdm
- TLSH T175373304744F1677FF4E1DBA159F2E2CCB362E628A3456E3A228F32D12FD0659BB2115
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1