Overview

overview

8

Static

static

1

RobloxPlay...er.exe

windows7-x64

Resubmissions

02-04-2023 15:34

230402-sz1smsad41 8

02-04-2023 15:30

230402-sxnqasha57 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxPlayerLauncher.exe

  • Size

    2.0MB

  • Sample

    230402-sxnqasha57

  • MD5

    ea422ffc74fbfbd6d980ae8e4d3513e8

  • SHA1

    1f1b01250bbab5d1b893add52c1d6654336c2f00

  • SHA256

    47d56b778f5a1815155fcb5c6a782df9a5b85866a1ced4d3cf1c4bc8dce8e17a

  • SHA512

    806b4d93a6435f1771b6022e9380c4cd7e039aaa659c4fc72b0d89b197432cbcbddaf72ed97c4c2d2078e250e421cfe8051c601122cbc324696219a25e63c3d3

  • SSDEEP

    49152:oUvIzhIhn1g5yca9e3jTITTMao+8k1TymMYPMQ3dS/BT79b6XrvZ:oSnhn6yca9ezCY9b4

Score
8/10
evasionspywarestealertrojan

Malware Config

Targets

    • Target

      RobloxPlayerLauncher.exe

    • Size

      2.0MB

    • MD5

      ea422ffc74fbfbd6d980ae8e4d3513e8

    • SHA1

      1f1b01250bbab5d1b893add52c1d6654336c2f00

    • SHA256

      47d56b778f5a1815155fcb5c6a782df9a5b85866a1ced4d3cf1c4bc8dce8e17a

    • SHA512

      806b4d93a6435f1771b6022e9380c4cd7e039aaa659c4fc72b0d89b197432cbcbddaf72ed97c4c2d2078e250e421cfe8051c601122cbc324696219a25e63c3d3

    • SSDEEP

      49152:oUvIzhIhn1g5yca9e3jTITTMao+8k1TymMYPMQ3dS/BT79b6XrvZ:oSnhn6yca9ezCY9b4

    Score
    8/10
    evasionspywarestealertrojan

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks