Overview

overview

7

Static

static

1

RobloxPlay...er.exe

windows7-x64

6

RobloxPlay...er.exe

windows10-2004-x64

7

Resubmissions

14-06-2024 07:26

240614-h9q13szepc 6

14-06-2024 07:26

240614-h9g36stepj 8

14-06-2024 07:24

240614-h8cr3azeja 7

14-06-2024 07:20

240614-h6g9rszdmf 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxPlayerInstaller.exe

  • Size

    5.4MB

  • Sample

    240614-h8cr3azeja

  • MD5

    a0396f9bb5e0144808cc7c7fda47e682

  • SHA1

    76bef1c55c6f288ca5988d344c4e92ee8f3a6329

  • SHA256

    b5d35eaf2ca4befb5ac6de8680609c9a86fdc257b49d21ce4c8d17eddaa1b51a

  • SHA512

    dd49140d4661d813501d67c44d5fedd6bdc7ce731242fb33973b0b7a5b603344682fe1bc393fcf9fe3f5ad10ed9f1de7dbc42c66ec16b84063fe535f288ab7e0

  • SSDEEP

    98304:JnvFdBAtAOZPKZvf2H2dDgl3UZqPKCRAvMcCLsbuar+v:15AdumYglHpRpc8o/rI

Score
7/10
discoveryevasiontrojan

Malware Config

Targets

    • Target

      RobloxPlayerInstaller.exe

    • Size

      5.4MB

    • MD5

      a0396f9bb5e0144808cc7c7fda47e682

    • SHA1

      76bef1c55c6f288ca5988d344c4e92ee8f3a6329

    • SHA256

      b5d35eaf2ca4befb5ac6de8680609c9a86fdc257b49d21ce4c8d17eddaa1b51a

    • SHA512

      dd49140d4661d813501d67c44d5fedd6bdc7ce731242fb33973b0b7a5b603344682fe1bc393fcf9fe3f5ad10ed9f1de7dbc42c66ec16b84063fe535f288ab7e0

    • SSDEEP

      98304:JnvFdBAtAOZPKZvf2H2dDgl3UZqPKCRAvMcCLsbuar+v:15AdumYglHpRpc8o/rI

    Score
    7/10
    evasiontrojandiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks