Resubmissions

29-04-2024 16:53

240429-vd64msff34 8

General

  • Target

    skibidi_copy_off_game.rbxl

  • Size

    3.4MB

  • Sample

    240429-vd64msff34

  • MD5

    6b3b0755a3061008bfe8894901f97956

  • SHA1

    1d6f9f911d5198195945734f0926b374d9bbc416

  • SHA256

    07025b2e0e775cdb2540ac7f4ba53d4697eae2bc3167274c10dd5258cd99371d

  • SHA512

    705e2aaa6d3677a104c0e0d3a9f5f2db355f252c74270da9e3692a1c7a1e555c3b9abcb27dc65c48911448318df3e53a15d557764c41149ae54ed97c39a2a162

  • SSDEEP

    49152:m6IOzVAz4eJYVxpTlTeUnKHavU+jQ+4HDeGChDAjSb0lc5LEb3:m6I4+9QlKGUOQ+4jGAjSb7I3

Malware Config

Targets

    • Target

      skibidi_copy_off_game.rbxl

    • Size

      3.4MB

    • MD5

      6b3b0755a3061008bfe8894901f97956

    • SHA1

      1d6f9f911d5198195945734f0926b374d9bbc416

    • SHA256

      07025b2e0e775cdb2540ac7f4ba53d4697eae2bc3167274c10dd5258cd99371d

    • SHA512

      705e2aaa6d3677a104c0e0d3a9f5f2db355f252c74270da9e3692a1c7a1e555c3b9abcb27dc65c48911448318df3e53a15d557764c41149ae54ed97c39a2a162

    • SSDEEP

      49152:m6IOzVAz4eJYVxpTlTeUnKHavU+jQ+4HDeGChDAjSb0lc5LEb3:m6I4+9QlKGUOQ+4jGAjSb7I3

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Drops desktop.ini file(s)

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks