General
-
Target
RobloxPlayerLauncher.exe
-
Size
5.0MB
-
Sample
240303-atfleabb45
-
MD5
f6df454f0107a0f1da33315f80588f09
-
SHA1
279ac512a9abac7e0ca7fbd01dab75239fdda25f
-
SHA256
f1c39623997dc5dc06d24f83e4accc4a36995b18c6ba7b9622b2bd07f3f2dbc4
-
SHA512
130ae0fd22b89587ac4d347c4896462f14f2d954470f8023dbae963941b476c13676433117798315e7441df7f25e71378ad98e8098ca3bdececfeef2a675a940
-
SSDEEP
98304:v8vCsaghzuacuY/banHkiVjgR3TJj3cAEXRHtAhMJ2VyLTbl:sCs3hzbY/4HZgR6HAK2UXh
Static task
static1
Behavioral task
behavioral1
Sample
RobloxPlayerLauncher.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
RobloxPlayerLauncher.exe
-
Size
5.0MB
-
MD5
f6df454f0107a0f1da33315f80588f09
-
SHA1
279ac512a9abac7e0ca7fbd01dab75239fdda25f
-
SHA256
f1c39623997dc5dc06d24f83e4accc4a36995b18c6ba7b9622b2bd07f3f2dbc4
-
SHA512
130ae0fd22b89587ac4d347c4896462f14f2d954470f8023dbae963941b476c13676433117798315e7441df7f25e71378ad98e8098ca3bdececfeef2a675a940
-
SSDEEP
98304:v8vCsaghzuacuY/banHkiVjgR3TJj3cAEXRHtAhMJ2VyLTbl:sCs3hzbY/4HZgR6HAK2UXh
-
Downloads MZ/PE file
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-