Overview

overview

7

Static

static

3

Roblox-Coo...ic.exe

windows7-x64

7

Roblox-Coo...ic.exe

windows10-2004-x64

7

main.pyc

windows7-x64

3

main.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Roblox-Cookie-Logger-main.zip

  • Size

    17.2MB

  • Sample

    240510-ws9nrade98

  • MD5

    ad1ed24f5a590102f9d2e66b3d6ef78f

  • SHA1

    437906addd269a0ccf151faee9adf157a923fb26

  • SHA256

    dba66a3b6da35a30734871b840747dcc9d1e704a717349e92d79b9a5e0bcd595

  • SHA512

    1a9ebe396b547b2aa79d82bd7ca575ea429ed96dc5d4eb52afa8eb4c0be77d923008e1ffbd1b5809dc715f653d0ce19620eb743cfd59bdadb6ca1a3fa9644695

  • SSDEEP

    393216:UwLcAp989CgBLGaXU/zsD6AuOZlsLlSF+28eH9lxjUQ5ba6A:vcu89NBL6/zskOZluNuHVxban

Score
7/10
persistencepyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      Roblox-Cookie-Logger-main/Arctic.exe

    • Size

      17.4MB

    • MD5

      b5343da0e0f7cc78266f8282138f6bfc

    • SHA1

      fdbb82d380e98a48a58de021b90f116cedc01298

    • SHA256

      3e81ac827824478a5532846c42bdbf5d469beab9793092542419d0c5ebcf52ac

    • SHA512

      01b5787a93d971f36238d9754db108e5d8133ccde528e7250c0e1acc3d3693f8a628d12fc8f14cdfff55236c0549e55a679b432f7f0e59f1c1bf7ec7ae2e2abf

    • SSDEEP

      393216:jCSARbMb/m3pbsLG/PcjGsoTZleDXdk5I8g8F9/75oQlvQ+:+SkMbKx/PcsTZlofAFZlvQ

    Score
    7/10
    upxpersistencespywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      main.pyc

    • Size

      1KB

    • MD5

      1c5c2d9734b65b429525cc40b60bb502

    • SHA1

      7881b588b603634c4d698463da90ec873ad21bd2

    • SHA256

      b639f068849184246ab67a3fbdc5f410633d37155142a24357e17dc824a3fb1b

    • SHA512

      e42b00051fe8ad076788fe864ae8a903fbf7079fe8f92c76cf1c36155f255c24129f084d373767155224f6fecc4e18d24c0ea5829e0a01dc9ed5fd59cc0fe5e0

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks