General

  • Target

    roblox_fastwalk.exe

  • Size

    5.0MB

  • Sample

    240525-y6pxlshb6y

  • MD5

    de17189e84c44c1897bf208d1b2870eb

  • SHA1

    fece910b6956a71b9402419151a3e45584ace801

  • SHA256

    8a501c4549350715eaf14d96f24b6a919324730ce0d778c8cecd93c003a2f7df

  • SHA512

    07adb1a9648da504b62deb6d554af523abcf52ff442bb9f9011f56eac5c8d2078d619315a6f428f4f6212e892a17c7432ed4a9746e88b79b7044a047ba91a98a

  • SSDEEP

    98304:6q873WHaJVQWJuhswoYv5eO0zo0Ahd6y0Naxxv8fqDDAxNeyN/qqtxluoDmEx:6q9H8uWJysVYvsOaoyMxxvjDDAxESlu

Score
7/10

Malware Config

Targets

    • Target

      roblox_fastwalk.exe

    • Size

      5.0MB

    • MD5

      de17189e84c44c1897bf208d1b2870eb

    • SHA1

      fece910b6956a71b9402419151a3e45584ace801

    • SHA256

      8a501c4549350715eaf14d96f24b6a919324730ce0d778c8cecd93c003a2f7df

    • SHA512

      07adb1a9648da504b62deb6d554af523abcf52ff442bb9f9011f56eac5c8d2078d619315a6f428f4f6212e892a17c7432ed4a9746e88b79b7044a047ba91a98a

    • SSDEEP

      98304:6q873WHaJVQWJuhswoYv5eO0zo0Ahd6y0Naxxv8fqDDAxNeyN/qqtxluoDmEx:6q9H8uWJysVYvsOaoyMxxvjDDAxESlu

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks