3e091df4051e6b0859c2142a0869a415e5968c20edb5e9a60fcd077f7b61be19 | Triage

Sharing

General

Target

Roblox Evon Exploit V4_02483.exe
Size

8.7MB
Sample

230327-275k8shf8z
MD5

98194b1fd3ceea50438976b40ea59d05
SHA1

ed918fbb5765aa91e5c9d2c492ec00667478ac35
SHA256

3e091df4051e6b0859c2142a0869a415e5968c20edb5e9a60fcd077f7b61be19
SHA512

9587acb23ee51e4743c5399b78b64f2a0e87e2413cd56e220df8c08ebe0f352ac0ca83c1826f09718876a6248057e9cbac0f38ee725de83b4ca7de4f805f30bf
SSDEEP

196608:wu6nOE62LOa8ewFCrqNeuUG59Fa9FVDNWXVkHo/ly:MOb2C6wFCrqNZ529PDNs2Ho/k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Roblox Evon Exploit V4_02483.exe
- Size
  
  8.7MB
- MD5
  
  98194b1fd3ceea50438976b40ea59d05
- SHA1
  
  ed918fbb5765aa91e5c9d2c492ec00667478ac35
- SHA256
  
  3e091df4051e6b0859c2142a0869a415e5968c20edb5e9a60fcd077f7b61be19
- SHA512
  
  9587acb23ee51e4743c5399b78b64f2a0e87e2413cd56e220df8c08ebe0f352ac0ca83c1826f09718876a6248057e9cbac0f38ee725de83b4ca7de4f805f30bf
- SSDEEP
  
  196608:wu6nOE62LOa8ewFCrqNeuUG59Fa9FVDNWXVkHo/ly:MOb2C6wFCrqNZ529PDNs2Ho/k
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2