Resubmissions

01-04-2024 21:24

240401-z9efqagb87 8

01-04-2024 21:12

240401-z2j18sga39 7

01-04-2024 21:06

240401-zx5r5sfh57 7

General

  • Target

    http://roblox.com

  • Sample

    240401-zx5r5sfh57

Malware Config

Targets

    • Target

      http://roblox.com

    • Changes its process name

    • Reads user data of web browsers

      Reads stored browser data which can include saved credentials.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Reads CPU attributes

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

2
T1082

Tasks