Overview

overview

8

Static

static

1

roblox.exe

windows7-x64

8

roblox.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    roblox.exe.bin

  • Size

    2.0MB

  • Sample

    230501-yw8xqsab61

  • MD5

    0d27f9cb1e48cb0dd24a3c7563bb56f9

  • SHA1

    f174179176a400842251a38009ea194c1cf5751b

  • SHA256

    0dd0117aa603ef82d810ec10ca4ee6cf1fcbf8b7d9e9c0bb9562d8ad5954fb56

  • SHA512

    3e81fc5790f8244a0065f06b88772a9ea51c03698ed210dae987e3e8e475277cc121055fae771807d62bc37aa80899b216e0262459ad59bb5a84ea591d7f9aa9

  • SSDEEP

    49152:Zbc5jQt9dZ3YPw3pNO9TLxaCzaCfTjVM5PMQ3dSuUTNb6du03q:ZbJ9dZoPw3pNsZbcuz

Score
8/10
evasionspywarestealertrojan

Malware Config

Targets

    • Target

      roblox.exe.bin

    • Size

      2.0MB

    • MD5

      0d27f9cb1e48cb0dd24a3c7563bb56f9

    • SHA1

      f174179176a400842251a38009ea194c1cf5751b

    • SHA256

      0dd0117aa603ef82d810ec10ca4ee6cf1fcbf8b7d9e9c0bb9562d8ad5954fb56

    • SHA512

      3e81fc5790f8244a0065f06b88772a9ea51c03698ed210dae987e3e8e475277cc121055fae771807d62bc37aa80899b216e0262459ad59bb5a84ea591d7f9aa9

    • SSDEEP

      49152:Zbc5jQt9dZ3YPw3pNO9TLxaCzaCfTjVM5PMQ3dSuUTNb6du03q:ZbJ9dZoPw3pNsZbcuz

    Score
    8/10
    evasionspywarestealertrojan

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks