General
-
Target
RobloxPlayerLauncher.exe
-
Size
2.0MB
-
Sample
230206-t3mkvseh43
-
MD5
6723f12d15525aab7f012dc6050a8d3c
-
SHA1
a349dc774f9e5fa0023c26d421f94dec8701f19d
-
SHA256
e08d1e9c9bd59b716c3ce85ecbdbe935b5b57358f12a3f03b1f0a8914c1476f9
-
SHA512
4fef0a875bf25d097b8cfe0eadd6e4e6e5c141ac08ab4e94112f0d7b1cae1b574e5feab68a0eb79993648aabacc2d2c51c894818af0995e78e4b7cd3a60907d4
-
SSDEEP
49152:ZmFShsAj6/KeoXwO4RDQ8ZdTJCaY+4lNT7CM6PMQ3d2OnTqb6cPz:SS+Aj6/uXcDQ81sbB7
Static task
static1
Malware Config
Targets
-
-
Target
RobloxPlayerLauncher.exe
-
Size
2.0MB
-
MD5
6723f12d15525aab7f012dc6050a8d3c
-
SHA1
a349dc774f9e5fa0023c26d421f94dec8701f19d
-
SHA256
e08d1e9c9bd59b716c3ce85ecbdbe935b5b57358f12a3f03b1f0a8914c1476f9
-
SHA512
4fef0a875bf25d097b8cfe0eadd6e4e6e5c141ac08ab4e94112f0d7b1cae1b574e5feab68a0eb79993648aabacc2d2c51c894818af0995e78e4b7cd3a60907d4
-
SSDEEP
49152:ZmFShsAj6/KeoXwO4RDQ8ZdTJCaY+4lNT7CM6PMQ3d2OnTqb6cPz:SS+Aj6/uXcDQ81sbB7
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-