Analysis

  • max time kernel
    101s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2022 21:02

General

  • Target

    Roblox Executor/WebResources/Resource0/app1/index.html

  • Size

    3KB

  • MD5

    0b31851506ed8c5919d9252172b78cf0

  • SHA1

    1d791bd5fd1717197ffbfa50620eb0affd3f03cb

  • SHA256

    efbc2f1ea39a9e840c755820be8b50ee6a78ed604514980b984b9ab1ae18a97f

  • SHA512

    8b33cfe591d23c2bbea14cc54bcddbd8f25833a23ecbfbb2ef85f1a6757d15f93bba99f357d31306732e2b32dec7d01068bb3f0f814dd727b6797f5e60f8c9d8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 15 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\Roblox Executor\WebResources\Resource0\app1\index.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3796 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      PID:5104

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads