Overview

overview

6

Static

static

1

RobloxPlay...1).exe

windows7-x64

RobloxPlay...1).exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxPlayerInstaller (1).exe

  • Size

    4.5MB

  • Sample

    240213-zbwmcaha6s

  • MD5

    19d265164be6ce8d95b63714095ce912

  • SHA1

    54b6adb8e2df115aec2cfc7f14fc3ba8f61cab51

  • SHA256

    8d934583fe7fc3a82411a51c5495f90a601a7a2ab9c84bf0ce6ace8ff0cd5924

  • SHA512

    090190a89ea02b181e313cd4454a6d9a3c12cf73def16c05536a9b1b5c98af2203b2146c75dd54d4bb82c7b1c85c1b6dfb16ef6e904873da61505cfbf98a67de

  • SSDEEP

    98304:+gvBVax1UO6KtHcC4cp4eNHsgTlr6Xo8nQPEpd5Onp7bLW:F+xeOmCt4ZgZsQ4dsB+

Score
6/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      RobloxPlayerInstaller (1).exe

    • Size

      4.5MB

    • MD5

      19d265164be6ce8d95b63714095ce912

    • SHA1

      54b6adb8e2df115aec2cfc7f14fc3ba8f61cab51

    • SHA256

      8d934583fe7fc3a82411a51c5495f90a601a7a2ab9c84bf0ce6ace8ff0cd5924

    • SHA512

      090190a89ea02b181e313cd4454a6d9a3c12cf73def16c05536a9b1b5c98af2203b2146c75dd54d4bb82c7b1c85c1b6dfb16ef6e904873da61505cfbf98a67de

    • SSDEEP

      98304:+gvBVax1UO6KtHcC4cp4eNHsgTlr6Xo8nQPEpd5Onp7bLW:F+xeOmCt4ZgZsQ4dsB+

    Score
    6/10
    discoveryevasionpersistencetrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Downloads MZ/PE file

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks