71b0c4dd832beff92a73fb849c1fc730d65e9be3e24676b4a0e29332bc6b3391 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

RexadorInstaller.msi

windows10-2004-x64

7

Resubmissions

25/09/2026, 18:31

260925-w51xdatdrc7

25/09/2026, 18:23

260925-w1g9gatz6r7

25/09/2026, 18:13

260925-wtx2cage327

Sharing

Copy URL Twitter E-mail

General

Target
RexadorInstaller.msi
Size 129.2MB
Sample260925-w51xdatdrc
SHA256 71b0c4dd832beff92a73fb849c1fc730d65e9be3e24676b4a0e29332bc6b3391
MD5 8354e8f89f41d1780b7213249d31eb2f
SHA1 b72af281d1df1523a8cffc1ac893dffdf755a695
SHA512 8fb5471b2212db2a455873c7d5aa1c496281c79d3c4aedd5a26a01ca86f5994cea6eac9fd3f319660d46a3aeb7d07ec04c987a9c36c1d71575f6124cc9b995d6
SSDEEP 3145728:vm65CFQ7f7UN+d7O6kozGwhthTXm0CQqJqsZYcGz:vBU27rdK64wtCQqDG1
TLSH
T199583322784CDC12E9B36874D12347F6856B6E10CF9DC843E66C7E11BDB3AD0F52A25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RexadorInstaller.msi

Resource

win10v2004-20260911-en

windows10-2004-x64

14 signatures

150 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  RexadorInstaller.msi
- Size 129.2MB
- SHA256 71b0c4dd832beff92a73fb849c1fc730d65e9be3e24676b4a0e29332bc6b3391
- MD5 8354e8f89f41d1780b7213249d31eb2f
- SHA1 b72af281d1df1523a8cffc1ac893dffdf755a695
- SHA512 8fb5471b2212db2a455873c7d5aa1c496281c79d3c4aedd5a26a01ca86f5994cea6eac9fd3f319660d46a3aeb7d07ec04c987a9c36c1d71575f6124cc9b995d6
- SSDEEP 3145728:vm65CFQ7f7UN+d7O6kozGwhthTXm0CQqJqsZYcGz:vBU27rdK64wtCQqDG1
- TLSH
  T199583322784CDC12E9B36874D12347F6856B6E10CF9DC843E66C7E11BDB3AD0F52A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy