Skip to content
MalwareWiki

Malware

RAILSETTER

According to Trend Micro, RAILSETTER is a persistence installer component designed to work with RAILLOAD.

RAILSETTER is a Windows malware family.

Background

Trend Micro identifies RAILSETTER as a persistence-installer module built to operate alongside RAILLOAD. Its core tasks involve copying and renaming RAILLOAD's intended host binary from System32 into the target directory, timestomping the create, access, and modify timestamps of both RAILLOAD and its host, and registering a scheduled task to maintain persistence.

Source: Malpedia (Fraunhofer FKIE).