General
-
Target
setting-up-roblox-studio
-
Size
227KB
-
Sample
240423-rkr2hsha55
-
MD5
de13f26567326f27634fdcf7137828c8
-
SHA1
cf818bee430504baa3b2acb96e843e485e05846f
-
SHA256
4d90a8870477c5e1877b6749a3f9ce21a9ce99eaf35c0343c0db9d078e70bd31
-
SHA512
5a07bcb4c09eb4c0c1b64a14cd7d248c8417f646579029840867ea62f45d1fbc1567b51da467bd4fa84548f3b9549e44202739fba60e2eac5f53b9ac85e78cae
-
SSDEEP
3072:WAUsYXHNfUCypeGV4eyeuY42Xim1YxiOXXYNFkO:WAUsYXHNfUCyU0110YNX
Static task
static1
Malware Config
Targets
-
-
Target
setting-up-roblox-studio
-
Size
227KB
-
MD5
de13f26567326f27634fdcf7137828c8
-
SHA1
cf818bee430504baa3b2acb96e843e485e05846f
-
SHA256
4d90a8870477c5e1877b6749a3f9ce21a9ce99eaf35c0343c0db9d078e70bd31
-
SHA512
5a07bcb4c09eb4c0c1b64a14cd7d248c8417f646579029840867ea62f45d1fbc1567b51da467bd4fa84548f3b9549e44202739fba60e2eac5f53b9ac85e78cae
-
SSDEEP
3072:WAUsYXHNfUCypeGV4eyeuY42Xim1YxiOXXYNFkO:WAUsYXHNfUCyU0110YNX
-
Downloads MZ/PE file
-
Modifies Installed Components in the registry
-
Sets file execution options in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-