Overview

overview

8

Static

static

1

RobloxPlay...er.exe

windows11-21h2-x64

8

Resubmissions

06/01/2024, 19:15

240106-xx766aeafj 6

06/01/2024, 17:28

240106-v2b86sebb2 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxPlayerInstaller.exe

  • Size

    4.5MB

  • Sample

    240106-v2b86sebb2

  • MD5

    c9c89a5180728704d9fc8b10fcfa5124

  • SHA1

    6eb7edac4c879645641394eb20db3cf707019b47

  • SHA256

    0e774f8533566b6221fdd374f4f6f30551f4e6aeb4848521445d15158f029855

  • SHA512

    98fbac35cbfff889ffb7a9b26684aee196237a54a9548285c233c2abf0a6a1f7588eb28d166a3a32e103f974418a7e75477cc699e5f0c8e3e290916b44ffc220

  • SSDEEP

    98304:Smvn+iSkszLaY6ZZBrKv0Log5yGj06VuXJ+2npsbLfNzt:P+iBsGZ7KngtE+YK3fdt

Score
8/10
adwarediscoveryevasionpersistencestealertrojan

Malware Config

Targets

    • Target

      RobloxPlayerInstaller.exe

    • Size

      4.5MB

    • MD5

      c9c89a5180728704d9fc8b10fcfa5124

    • SHA1

      6eb7edac4c879645641394eb20db3cf707019b47

    • SHA256

      0e774f8533566b6221fdd374f4f6f30551f4e6aeb4848521445d15158f029855

    • SHA512

      98fbac35cbfff889ffb7a9b26684aee196237a54a9548285c233c2abf0a6a1f7588eb28d166a3a32e103f974418a7e75477cc699e5f0c8e3e290916b44ffc220

    • SSDEEP

      98304:Smvn+iSkszLaY6ZZBrKv0Log5yGj06VuXJ+2npsbLfNzt:P+iBsGZ7KngtE+YK3fdt

    Score
    8/10
    adwarediscoveryevasionpersistencestealertrojan

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Downloads MZ/PE file

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Sets file execution options in registry

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks