General
-
Target
RobloxPlayerLauncher.exe
-
Size
1.6MB
-
Sample
240411-kgehpafg35
-
MD5
df3c89248671866cfb9e0a407fad20b4
-
SHA1
2258e20671e6aaba8ce75abb5bc5bca8c4df0035
-
SHA256
93580834e65af2f5a83aacef47a1ec3ef45fc6ab9683ec4df771bbea713ab38f
-
SHA512
f6658f2653aefebc573518773c97319d87d70cabeb182cd622a5722d4df0417df17318f4b25b7929ab03e982a072e914175971b96e205356c5c6a23a3fedaf01
-
SSDEEP
49152:NmAhTN2Q5MmBRS+qYNS2+3njUrG+TvamoGXtTOgM7PMQpdAUFTHrPHHoV5N:gAhTkyZBdM2+3njUmrPHA
Static task
static1
Malware Config
Targets
-
-
Target
RobloxPlayerLauncher.exe
-
Size
1.6MB
-
MD5
df3c89248671866cfb9e0a407fad20b4
-
SHA1
2258e20671e6aaba8ce75abb5bc5bca8c4df0035
-
SHA256
93580834e65af2f5a83aacef47a1ec3ef45fc6ab9683ec4df771bbea713ab38f
-
SHA512
f6658f2653aefebc573518773c97319d87d70cabeb182cd622a5722d4df0417df17318f4b25b7929ab03e982a072e914175971b96e205356c5c6a23a3fedaf01
-
SSDEEP
49152:NmAhTN2Q5MmBRS+qYNS2+3njUrG+TvamoGXtTOgM7PMQpdAUFTHrPHHoV5N:gAhTkyZBdM2+3njUmrPHA
-
Downloads MZ/PE file
-
Sets file execution options in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-