General

  • Target

    roblox3335.zip

  • Size

    5.0MB

  • MD5

    a55b5642f42f2d89eb1464e594cab10c

  • SHA1

    9441f0f2d5abec37c592460c5129e3180671d7c1

  • SHA256

    1a44d980ad4e809fa458251d28cbf53879a8d844d45eafbffc520d12cca67265

  • SHA512

    bc3a583f8cbc374ac3331fb4f0580540f1519fb7b75c2cf6286594c41f793c99316de65295aa0b2c6b75de2ad383ad7de1393388f6fc1e843023283e9ae04494

  • SSDEEP

    98304:0/+LQ1LGquN40DUwHNIswpIC9mDP5yedQl9k+u2T0plnYxMOkwM4Y9:0/+LQlyNhUwtKpICwDPBoko0pxYWjd9

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

Files

  • roblox3335.zip
    .zip

    Password: roblox3335

  • Adopt me/Core.dll
    .dll windows x86

    Password: roblox3335

    848f236a4fcd8c9af5119911953b266d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Adopt me/Parametrs.dll
    .dll regsvr32 windows x86

    Password: roblox3335

    94c60e6948082b4c54f24638f1988437


    Headers

    Imports

    Exports

    Sections

  • Adopt me/Script.exe
    .exe windows x86

    Password: roblox3335

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Adopt me/config.dll
    .dll windows x64

    Password: roblox3335

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections