Analysis

  • max time kernel
    148s
  • max time network
    90s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240214-en
  • resource tags

    arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20/02/2024, 18:20

General

  • Target

    RobloxPlayerBeta.exe

  • Size

    79.0MB

  • MD5

    5e9dab8909a69b1a38d01ed160230c8a

  • SHA1

    880374e8a5c169eb7f29804e18bda2e6bb55300a

  • SHA256

    ba4f581f1ea43204f55dc23663c3fc8922f06b41c45957a6f3a767dbf909fa44

  • SHA512

    9eec96a0a04ceb1a80e393b5dcf0d3f1ec7e173a630ea197cb7c6d51eb96c3d772f4a090f12a0025eb60bea519e934191c377cd739a3cb657fd1de66031ef2b4

  • SSDEEP

    1572864:7V0y3tou8+DULtIIzDbIDyKJpwVT2sHghdYvDgz9z2VPjxqUl6A/lfz:7V0MrULtIgDsDHsHbvkz9zEPjxJh

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerBeta.exe
    "C:\Users\Admin\AppData\Local\Temp\RobloxPlayerBeta.exe"
    1⤵
      PID:3868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\Desktop\CompressRename.jpg

      Filesize

      769KB

      MD5

      8accd0902f32b7be4109b8e8b5db628e

      SHA1

      2c351b09169d7cbb13f1af666e6936491610e6af

      SHA256

      1445f666381e2e91cf8ef90182b1ab3638b81588b3b7e7e3dab3ea5ea8bc608c

      SHA512

      3850927ec879746ba7f89e32ab5767fd7194864f92c81cfbeb277321ee633486640d8dfad41f6c3fe89296eef08929ec316ff89cef3f0869465f238a5418e489

    • C:\Users\Admin\Desktop\ConvertFromProtect.xltx

      Filesize

      694KB

      MD5

      995f72062d7f6d3cd059080b5ea4a42f

      SHA1

      98f80d9308428887696220f58868e05d084cd860

      SHA256

      efc4ccc493cefafc27ec0d51e49dbda11014741ac485e53e7c59273b1b57bda8

      SHA512

      02b9215e0c3acd094c1f744c64bcb96c0e7e2d5e4542ca604c33d2bd94805b5d702e7f3648869935f442cad3ef90579339ce2183f2399724a5c495f986a64ff2

    • C:\Users\Admin\Desktop\DebugApprove.bmp

      Filesize

      397KB

      MD5

      510051e8d55bee0177efa5fcbb282d83

      SHA1

      198620c1fd540fecbbbad81fc950b89134877c87

      SHA256

      6d7f931d10cb81c9802aee194bec60c52905f6a52ba5fdd9a3385fb9c212783b

      SHA512

      0f6296996849eb406e959a0a03ec4a381b81c120303bb09f530b65d8dc9720c5943950cdfb749ad99023256c189fcee45c8dee43085dd1e73245480541eb209e

    • C:\Users\Admin\Desktop\ImportConvertTo.ppt

      Filesize

      992KB

      MD5

      3ae19641479997a0f04d001895849c04

      SHA1

      1b9e76472da520ec6cfca6e4706a9c3b11703030

      SHA256

      d7450db8c0d4a16c8a047959c3714ce13017221ca28b537ad35218c7308411e2

      SHA512

      ff2e143327f9faaee1e168091798fe728dc6640ab105993834e60e8e544fa4608092e0ebf8001943b8c41a2b9df81475d821d3a14a03035934ef09f5505880d2

    • C:\Users\Admin\Desktop\InitializeUndo.css

      Filesize

      471KB

      MD5

      e2520c7e57964a0350d7d455f12a99e3

      SHA1

      552b9375e3d975b2294d86e6e630f7d1f9814ef5

      SHA256

      4a5d3d31a1624c523e44425512bf5d08aa09252058485d4f1a31f124c78661bc

      SHA512

      2f240cc88ac1442e5d77e9147fdcce68bded9edc19d7216d7ccbc44928c48ca7c67e574210d26a123cf1ead8d14fc89e6ca4e2a6b6191d35982694b764e49d27

    • C:\Users\Admin\Desktop\LockImport.3gpp

      Filesize

      422KB

      MD5

      e1e0dda14843665929169bdbea906df3

      SHA1

      8cc15683ce2ef8bf1b269993e8715aef90f19560

      SHA256

      5cfc4502c2fc03fb80b484975626335436f7caad3b8a9e0e047f2e881c74e6e3

      SHA512

      9bfaf7f9be0674612c3e42eb70265687685082dd4325f933b24b783a8ab865c2ff5a85c07c97244e47d6beeb6c4d60831e6998bdcf9804f44d1c0e3782871a6b

    • C:\Users\Admin\Desktop\PingSkip.rmi

      Filesize

      545KB

      MD5

      08be46afd801e453bdd24aa7e80f3a7e

      SHA1

      ce7bedd44cb7fd4166231934a6167fdee48a2f2f

      SHA256

      a18850acb3873ca88d36e31fade1e8a135387bce4b8886d769b1ab592e24eda8

      SHA512

      7956932a447dea583c780b4b2b7403b19bd88df6734275743d92bcba06a81fd8e62325689c074d2a4cb9ce39f60dc13dbd117d35b006403ad8071819c0b7c82f

    • C:\Users\Admin\Desktop\ReadUnprotect.xlsm

      Filesize

      868KB

      MD5

      c65e4f08d22262e0fbf8186693e69a83

      SHA1

      1d182701de93e01d34d3ea1ab77f78acb8d30f7f

      SHA256

      3ffa37492fe4af81dd42409594ec3afa4a84c75d1b47236f604bf281a53fee8d

      SHA512

      e3529cc40e685f96f7ea0cc09e1500c206b317c44fb07b0aea6b590bd06375ccf332680dc694622ad812df47a87ae5e569d9e1aa27d30ab39f160b494a59c295

    • C:\Users\Admin\Desktop\RenameExit.cfg

      Filesize

      262KB

      MD5

      234deded0b0cc816adebd0ad6f23aa44

      SHA1

      222c62c6ea67596ba2f5cc9dd04ada2c7443a565

      SHA256

      77347a760fca00c19c808e4c7a0ef00e13275e4381552186a990527528923e43

      SHA512

      4ee761126458dd9097c287a0685da7ae9bc47459bd1456e35006c918458e6851ba45d35fb5f048a02cc9655317cf444578faa987dc455cb0b63b8161f13ffcdc

    • C:\Users\Admin\Desktop\SaveUndo.TTS

      Filesize

      446KB

      MD5

      8deccc7e6eeaa4d208d8bfdb388fda9e

      SHA1

      563add809b82c427b132a5ffa21c6206ea2e9e40

      SHA256

      a84ec50c27e5778d3d5ce0836935f830876e29a259d966e1be15df492b7c79cb

      SHA512

      b864761ad98a6e985e2133ece07c678787e6a8c894b7bedfd6a7408958ab25f807a59e79d489553f9b9288024f70139c34e500aa65e9042f6cf85987a6c2071e

    • C:\Users\Admin\Desktop\SearchDisable.docx

      Filesize

      421KB

      MD5

      f2a4e7e0b57e550c2a62ea8f798c3684

      SHA1

      fefeffed9306ebebafbd6db103177bc73fba6a46

      SHA256

      aa9ff291aba95b5b096bd855ad3970a6d3ecd08f3bd487e83599e284c8277020

      SHA512

      a895913a2bc448579b8481e1084a15608932ce42727f7ca3d5f3c0088d7b67d61bd13fb2a762062e2201acb00710c2d843e54c9d61989d619066073ae0f54cfc

    • C:\Users\Admin\Desktop\ShowSubmit.ADT

      Filesize

      369KB

      MD5

      156eaf0735562cc5596941b3552d264f

      SHA1

      f908f4dcfad4d872e2f0feeae10e301fa6d45a38

      SHA256

      78b03268a036fd37814f299e1228e8ec00f2f913ad76a9f62e56e0043fce0b71

      SHA512

      695e85f489c6b96be1ac5de7c5ff706b9e83c615369b13da0da56f86e43b8904f2c730066fd9ab9be71a4ef0451c8149b9414fd5daa06b887e5e1aaea52454df

    • C:\Users\Admin\Desktop\UnlockUninstall.M2V

      Filesize

      744KB

      MD5

      86b6c0861551df2ff054cab4c2ec210b

      SHA1

      b07f5b4ac9cdae199b22867b86846debdfd47813

      SHA256

      276ed9faaf69b6f8d1d6ab78250b37eea9eb72474e52ca6e6218ea84db6a9533

      SHA512

      144de7c40eea4f294e2708731a62921dbcca262d28cbb6cace229404841786d91be69214073d26a855714cebdf8e10922e2d06be44fdef9a0754b5f4c22fe89b

    • C:\Users\Admin\Desktop\UnregisterUnblock.xlt

      Filesize

      1.3MB

      MD5

      20ab518da15d83c18b51d1ea80521c1a

      SHA1

      77e8039c71c7cf78049c020fb078e50367f1fbdb

      SHA256

      cf6883943d03575aa527727d5f377ada26d39e7da20711b071f936cb4a0baedd

      SHA512

      ed7ba1462ef50056e15353a3b90affbfc62063e3b9afeefeb3b337aadd98589f5e45fb9776f831797bf84e5e4b8505b3a0bf74fd6b7681b6280bde957d3cb3bd

    • C:\Users\Public\Desktop\Acrobat Reader DC.lnk

      Filesize

      2KB

      MD5

      c3ad66e1e24532d42fdfc45e63026ffe

      SHA1

      40861e3557b62d38ad52e5ed1234835e55a60cd7

      SHA256

      3f17e5aabbea917984f4846da59f96739dd9c13f88938aa2ee74ffe959723667

      SHA512

      54044e3c5ce4be7475f2c5fb1649fe2685171557b87298f2b21e910661920c41b0a7bb6e212b5b9eae211d88d5f060ef9adb7761281682ab10f12c67026aa9a5

    • C:\Users\Public\Desktop\Firefox.lnk

      Filesize

      1000B

      MD5

      bb3544221d41897427ee0b7eef98cede

      SHA1

      274a65eac7cdac02c72c1c20f0c8bfe0e264a49d

      SHA256

      ed2403db134617290a92929fbf48fe033e1f59a150cf46ed8bdb2ceb50dd8fea

      SHA512

      99b6a71cf5e32f248a7a724cb664b0401578c479bdb587acc18479b26a440a74a3502a0b97db0d78c809b17c5d189411f10f1b4ba857b2646f17925f2232b326

    • C:\Users\Public\Desktop\VLC media player.lnk

      Filesize

      923B

      MD5

      2ce438d5d4dfa9ce044e5b5e2382d3b4

      SHA1

      0364404ff290556dfab32ca29f5ff749660b75f4

      SHA256

      f47a797fba0adf2788f7537c5e79a8dfafabff6b3aec64e68382f67e6d485c9e

      SHA512

      a41e2a5c0f87c4c854f441ebaaf18b2b02078a5007ada32b5f265511cf5072a650f140572cf1807c425ffbb57b73e048b77cc08f700384617c02ddf5b2977f0c