Overview
overview
3Static
static
Proxyless Roblox.rar
windows7-x64
3Proxyless Roblox.rar
windows10-2004-x64
3Retiro Cra...config
windows7-x64
3Retiro Cra...config
windows10-2004-x64
3Retiro Cra...p6.pdb
windows7-x64
3Retiro Cra...p6.pdb
windows10-2004-x64
3Retiro Cra...er.exe
windows7-x64
1Retiro Cra...er.exe
windows10-2004-x64
1Retiro Cra...et.dll
windows7-x64
1Retiro Cra...et.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Proxyless Roblox.rar
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Proxyless Roblox.rar
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Retiro Cracker/ConsoleApp6.exe.config
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Retiro Cracker/ConsoleApp6.exe.config
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
Retiro Cracker/ConsoleApp6.pdb
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Retiro Cracker/ConsoleApp6.pdb
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Retiro Cracker/RetiroCracker.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Retiro Cracker/RetiroCracker.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
Retiro Cracker/xNet.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Retiro Cracker/xNet.dll
Resource
win10v2004-20220812-en
General
-
Target
Proxyless Roblox.rar
-
Size
44KB
-
MD5
f7f53aabfb9cebcd26ba0eee5752c9e7
-
SHA1
c8a15ebb8e1f44eeaa7b9303ecd95c8b180ecd41
-
SHA256
23d9905f054999e643dc112a56597b5edbc71f48f90183f998de7fef9a247fcb
-
SHA512
447fe7858fa4eb0821572b5675e72a6fab56640628194253d3cea268fcaba3b73e60657a01c740ee7dc6e473a96fcfbdecb5a015d5150fca5bb3d166e7f249c3
-
SSDEEP
768:uXiGKnE8oPMFFqiUiPkCH+T8syVReoRFndTy63gjfLsgAlpNg7YdVM93sX1hV3ey:uXiRjyiUiu8s8ZRHTr3gDL/fMs32gA
Malware Config
Signatures
Files
-
Proxyless Roblox.rar.rar
-
Retiro Cracker/ConsoleApp6.exe.config
-
Retiro Cracker/ConsoleApp6.pdb
-
Retiro Cracker/RetiroCracker.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Retiro Cracker/xNet.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ