General
-
Target
RobloxStudioModManager.exe
-
Size
1.0MB
-
Sample
240614-1zq77sxgle
-
MD5
1ece1bf83a1ba968df06fe49b23e3bf7
-
SHA1
f0994bae65054625abb12e20df10927a9282b40d
-
SHA256
d35915a18fe31820c021ec0c1e0e9b9ca50e3256c152930dcd5b5c3bd8c9d2a5
-
SHA512
04d8dfa3e56cd61446207f8487f6a95e23ae9e9d641abd5b45206a380785156308fad965efc2f8d6f7ce85e23d2a2a3b27710750a6b4a7ff103e3457d8b8e048
-
SSDEEP
12288:fNoFgEzDPOVaAubNoFgEQLkZdfrXg+JwuKt/S/60nda7E+zsNoYql:VDyD1ASD0fw+Jwz/S/62kAVG
Static task
static1
Malware Config
Targets
-
-
Target
RobloxStudioModManager.exe
-
Size
1.0MB
-
MD5
1ece1bf83a1ba968df06fe49b23e3bf7
-
SHA1
f0994bae65054625abb12e20df10927a9282b40d
-
SHA256
d35915a18fe31820c021ec0c1e0e9b9ca50e3256c152930dcd5b5c3bd8c9d2a5
-
SHA512
04d8dfa3e56cd61446207f8487f6a95e23ae9e9d641abd5b45206a380785156308fad965efc2f8d6f7ce85e23d2a2a3b27710750a6b4a7ff103e3457d8b8e048
-
SSDEEP
12288:fNoFgEzDPOVaAubNoFgEQLkZdfrXg+JwuKt/S/60nda7E+zsNoYql:VDyD1ASD0fw+Jwz/S/62kAVG
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Legitimate hosting services abused for malware hosting/C2
-