Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

RobloxPlay...er.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxPlayerInstaller.exe

  • Size

    18.9MB

  • Sample

    240404-twydsacc9y

  • MD5

    8fcfabc8739b1b271944fceee2e54134

  • SHA1

    71b1a979c0a113fe5a5c91961d151521a61445aa

  • SHA256

    6b968a7272163b7593d3e932dda844bcacd5d7a209370bd4e30506ff3d63c7f5

  • SHA512

    ca21db934e68842693f2a34c7c59a8bab584e12df420139b0ba25e3dcb18ca482bce6281bd86bf8997f2b96553307eaeb35bdd80a0d220f52ede097bed008f5d

  • SSDEEP

    393216:rz0QyP8AxYDMDfDg4c6AUZAc5AEHkl+/iU:/0QRXgb03OZvvElA

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      RobloxPlayerInstaller.exe

    • Size

      18.9MB

    • MD5

      8fcfabc8739b1b271944fceee2e54134

    • SHA1

      71b1a979c0a113fe5a5c91961d151521a61445aa

    • SHA256

      6b968a7272163b7593d3e932dda844bcacd5d7a209370bd4e30506ff3d63c7f5

    • SHA512

      ca21db934e68842693f2a34c7c59a8bab584e12df420139b0ba25e3dcb18ca482bce6281bd86bf8997f2b96553307eaeb35bdd80a0d220f52ede097bed008f5d

    • SSDEEP

      393216:rz0QyP8AxYDMDfDg4c6AUZAc5AEHkl+/iU:/0QRXgb03OZvvElA

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks