Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    RobloxPlayerInstaller.exe

  • Size

    4.6MB

  • Sample

    240409-tlm53afc2x

  • MD5

    1b57a241eed58ce47249a846f2391652

  • SHA1

    345999af03a6c515191d212a200fad24039100c1

  • SHA256

    25913bcf70e0a8447e3ae39294cb3c3be44f15dcbccc4a0cd2aa4538e5ecc0f1

  • SHA512

    870cc586696961c4de63643f264514140357cad1c9a4eaf9f1e631507c680359cdc760728afd46f6511155dc5c37b7c61dcd6825b185635aa0353fb18313a8c0

  • SSDEEP

    98304:qXv8fLneOI8A0vq1pmgKkt6paeVtBN0Y2ycun:ikL48flgdsBKxlS

Malware Config

Targets

    • Target

      RobloxPlayerInstaller.exe

    • Size

      4.6MB

    • MD5

      1b57a241eed58ce47249a846f2391652

    • SHA1

      345999af03a6c515191d212a200fad24039100c1

    • SHA256

      25913bcf70e0a8447e3ae39294cb3c3be44f15dcbccc4a0cd2aa4538e5ecc0f1

    • SHA512

      870cc586696961c4de63643f264514140357cad1c9a4eaf9f1e631507c680359cdc760728afd46f6511155dc5c37b7c61dcd6825b185635aa0353fb18313a8c0

    • SSDEEP

      98304:qXv8fLneOI8A0vq1pmgKkt6paeVtBN0Y2ycun:ikL48flgdsBKxlS

    • Checks whether UAC is enabled

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks