General

  • Target

    http://roblox.com

  • Sample

    230723-3ethyaha95

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://pastebin.com/raw/G2ZYrL7v

Targets

    • Target

      http://roblox.com

    Score
    10/10
    • Blocklisted process makes network request

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks