Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

Roblox.Mod.Menu.zip

windows10-1703-x64

1

Roblox Mod Menu.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Roblox.Mod.Menu.zip

  • Size

    85.0MB

  • Sample

    230416-dp33paac4z

  • MD5

    b22c8bf73d1989ea4ad7de1b141e484a

  • SHA1

    5dbd5f17284a2edfc8a51f3b4116055cafdbd2bb

  • SHA256

    e4978edbdc4952f6cc4e148f94e5028e5fd5253134a6ee5afedcb7c732026da5

  • SHA512

    6d52f7097801dab622b4410e41d3b8505b9961a4d6a6853a649aa13b0f3465de065f85aaea966ee7d1c8390789ac0e5035fdc2e6464619ee67e606342e95c564

  • SSDEEP

    1572864:bd8qaVPVp0zfOCn6kSkXetCCe8yQBD11pSXaG6z5VqtnWZhHuG+NLimdca993MY:radiT9FX57KkKZ5VjAwM8Y

Score
7/10
persistence

Malware Config

Targets

    • Target

      Roblox.Mod.Menu.zip

    • Size

      85.0MB

    • MD5

      b22c8bf73d1989ea4ad7de1b141e484a

    • SHA1

      5dbd5f17284a2edfc8a51f3b4116055cafdbd2bb

    • SHA256

      e4978edbdc4952f6cc4e148f94e5028e5fd5253134a6ee5afedcb7c732026da5

    • SHA512

      6d52f7097801dab622b4410e41d3b8505b9961a4d6a6853a649aa13b0f3465de065f85aaea966ee7d1c8390789ac0e5035fdc2e6464619ee67e606342e95c564

    • SSDEEP

      1572864:bd8qaVPVp0zfOCn6kSkXetCCe8yQBD11pSXaG6z5VqtnWZhHuG+NLimdca993MY:radiT9FX57KkKZ5VjAwM8Y

    Score
    1/10
    behavioral1

    • Target

      Roblox Mod Menu.exe

    • Size

      86.8MB

    • MD5

      26d088d71dfb2b64adfed821a03d91a2

    • SHA1

      31f65cc0d5312c7323fdd9056ccc9c9df4fc8424

    • SHA256

      203614112bb28070116344b4c63a75c12990c83abee247c9f11dffad8bc64354

    • SHA512

      a9111be41a0bd6ac9097698aaf28cbce43088e8bc6a0b2b3ec1e679315bc7fc2a450ca509eab0e83423b64b17c55c602d715deee4615be95237519e219c89474

    • SSDEEP

      1572864:/FgYdsOqAgEUgTEIbOZ+e0zJkJSQifKUoytRZBozRC+FF6RQOGL0j1+w7WG:SAs3vARbB1tyj4ZB0LcFSG

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral2

MITRE ATT&CK Enterprise v6

Tasks