RAILSETTER
- Malware type
- loader, trojan
- Profile updated
- 2026-07-07 13:15:59
Targeted industries: government-and-public-sector financial-services
Context
According to Trend Micro, RAILSETTER is a persistence installer component designed to work with RAILLOAD. Its main functions include: Copying and renaming RAILLOAD’s intended host from System32 to the intended target directory; Timestomping RAILLOAD and its host’s create, access, and modify time; Creating a scheduled task for persistence.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Railsetter_Auto (yara-rule)
Reports & references
- Trend Micro — The Espionage Toolkit Of Earth Alux (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Railsetter (report)