e768d15f6f364c7a2bfa7daa2348b5438cfa7c932fea4f6d0f5f5da3031337ce | Triage™

Login
Reports

Overview

overview

7

Static

static

3

RustLuma.msi

windows10-2004-x64

7

Resubmissions

10/09/2026, 19:43

260910-yfc55avfnf7

10/09/2026, 19:38

260910-ycqxtaveng10

Sharing

Copy URL Twitter E-mail

General

Target
RustLuma.msi
Size 245.3MB
Sample260910-yfc55avfnf
SHA256 e768d15f6f364c7a2bfa7daa2348b5438cfa7c932fea4f6d0f5f5da3031337ce
MD5 a04cdb4ae7febdbba0498b039aa1f17f
SHA1 6d8f16225b1d5fc27d1e58e1326baaadcf113bb9
SHA512 e680cdefbde981641259580758adad93b6884f1e009239591f59aad16db16a1da29b3f65f0892cb4571ae15f7b2b83b4ffe41394e6a5fe1d83a24c24bb0df04d
SSDEEP 393216:CfRNp2suyGw2mH93dP1L8+6RoXe83SgbS0zqCVWo3ZvMls3Uypdh52McaE+VxBcR:aCXKhB3xPc+pCQ2fPbjCC
TLSH
T186C89D0673E501A6E5B3E1348AA74503E773B4635731CBDB32AC43582FBBAE45A3A714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RustLuma.msi

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

300 seconds

execution persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  RustLuma.msi
- Size 245.3MB
- SHA256 e768d15f6f364c7a2bfa7daa2348b5438cfa7c932fea4f6d0f5f5da3031337ce
- MD5 a04cdb4ae7febdbba0498b039aa1f17f
- SHA1 6d8f16225b1d5fc27d1e58e1326baaadcf113bb9
- SHA512 e680cdefbde981641259580758adad93b6884f1e009239591f59aad16db16a1da29b3f65f0892cb4571ae15f7b2b83b4ffe41394e6a5fe1d83a24c24bb0df04d
- SSDEEP 393216:CfRNp2suyGw2mH93dP1L8+6RoXe83SgbS0zqCVWo3ZvMls3Uypdh52McaE+VxBcR:aCXKhB3xPc+pCQ2fPbjCC
- TLSH
  T186C89D0673E501A6E5B3E1348AA74503E773B4635731CBDB32AC43582FBBAE45A3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution persistence privilege_escalation ransomware
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy