Overview

overview

10

Static

static

10

RobloxHelper.exe

windows7-x64

10

RobloxHelper.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RobloxHelper.exe

  • Size

    68KB

  • MD5

    3c3b9cecda122f4bb1e65eebe8e22e9a

  • SHA1

    cbca313785f72843615cb1e31544590d23c6edbf

  • SHA256

    0957f18894a97f39a83fff129de250e45955b68b711fcd786458aeaf1bb5a38b

  • SHA512

    bba9cfabfffaae224ebf27521833a4dc1cf5fc059b00a524f3c06fe0768ad23c78c45bb9780c77baa13ed4c3cfd620728cee0cc0d445def1c3e52a3e1c0756c7

  • SSDEEP

    1536:ErcuBVouJtO1fTlIFibNxVrGMO65SOJvqxaX:E3tmbNj3ZSOJnX

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

bay-cf.gl.at.ply.gg:20819:8848

147.185.221.20:8848
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RobloxHelper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections