General

  • Target

    Roblox_hack.exe

  • Size

    42KB

  • MD5

    02863ab73536fc2be8ad9e34b8fe6702

  • SHA1

    a79e78ca29d270c59cf85c959a8d361b0a822f42

  • SHA256

    bbae7da8e620e2dd1022c51156d0f94aad5e5429aa94baf972479f701118bb25

  • SHA512

    019f2395fc2bb376b5d20170e74541604bdd16da1428338009a9c3d482f89b943d0ba8c233a9a180443da48f59ab5ee06477ff4f4cffa546537d6c3b3b55353c

  • SSDEEP

    768:IywCo3fexwqRDlDdH4Uu8jEl/CIg9N3hcDppryOz:isDdYUdElJg9fcjLz

Score
10/10

Malware Config

Extracted

Family

xworm

C2

0.tcp.eu.ngrok.io:16485

Mutex

1OD4UvJ1J2aUIG7x

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Roblox_hack.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections