General
-
Target
RobloxPlayerLauncher.exe
-
Size
2.0MB
-
Sample
230202-xavbsafg4w
-
MD5
e877753d81250a82da1df79ce78dda76
-
SHA1
7a8e6e4a3220531edb330b304c6073591f1a17fe
-
SHA256
b87ae2da3f8d7db9e89ebde0ab3c29f442734b3231b8257ef0a5bd8a9358ee5c
-
SHA512
2ef37b5b87566cecebf92afdf2d51a3f7d90da9828d92f5aba5a9a77c080111ca8bb6f7b8e21291b7ee282af94590ba695e5c05f1d5ea9f946d8ea7f0ef436ac
-
SSDEEP
49152:LEsDDhM9qN6bTFygjschrrAFTPYadAUZkTxNMKPMQ3d2aJTEb6Wa:tXhMtFygj/rrydbQ
Static task
static1
Behavioral task
behavioral1
Sample
RobloxPlayerLauncher.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
RobloxPlayerLauncher.exe
-
Size
2.0MB
-
MD5
e877753d81250a82da1df79ce78dda76
-
SHA1
7a8e6e4a3220531edb330b304c6073591f1a17fe
-
SHA256
b87ae2da3f8d7db9e89ebde0ab3c29f442734b3231b8257ef0a5bd8a9358ee5c
-
SHA512
2ef37b5b87566cecebf92afdf2d51a3f7d90da9828d92f5aba5a9a77c080111ca8bb6f7b8e21291b7ee282af94590ba695e5c05f1d5ea9f946d8ea7f0ef436ac
-
SSDEEP
49152:LEsDDhM9qN6bTFygjschrrAFTPYadAUZkTxNMKPMQ3d2aJTEb6Wa:tXhMtFygj/rrydbQ
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-