Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
30/04/2024, 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Roblox Unlocker.exe
Resource
win7-20240419-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roblox Unlocker.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
driver/rbx.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
driver/rbx.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
driver/rbx.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
driver/rbx.vbs
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target driver/rbx.exe
- Size 605KB
- Sample240430-lnhpcshc26
- SHA256 83dfcb08ea4aa1b857d952a8a177db775d1a7e9cfc30b528848a4a29c8dbf0b9
- MD5 09d083f0e2c1e8a3561209902333ad8f
- SHA1 d9692d3aba34a39aeb9e53cb3d25562b94e2e597
- SHA512 c71371263cacc4872a4bf621614940f08c9436062683be5de921ae6e509079e25ea380623e8945d40858819a664bd76590defb2a89949e8e5666190f1024ca6b
- SSDEEP 12288:IKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:IKyacgDD+4fwG1NaTSw
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe 2920 rbx.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2920 rbx.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2920 rbx.exe