General

  • Target

    Roblox-Cookie-Logger-main.zip

  • Size

    17.2MB

  • Sample

    240615-bcw3hatbqa

  • MD5

    ad1ed24f5a590102f9d2e66b3d6ef78f

  • SHA1

    437906addd269a0ccf151faee9adf157a923fb26

  • SHA256

    dba66a3b6da35a30734871b840747dcc9d1e704a717349e92d79b9a5e0bcd595

  • SHA512

    1a9ebe396b547b2aa79d82bd7ca575ea429ed96dc5d4eb52afa8eb4c0be77d923008e1ffbd1b5809dc715f653d0ce19620eb743cfd59bdadb6ca1a3fa9644695

  • SSDEEP

    393216:UwLcAp989CgBLGaXU/zsD6AuOZlsLlSF+28eH9lxjUQ5ba6A:vcu89NBL6/zskOZluNuHVxban

Score
7/10

Malware Config

Targets

    • Target

      Roblox-Cookie-Logger-main/Arctic.exe

    • Size

      17.4MB

    • MD5

      b5343da0e0f7cc78266f8282138f6bfc

    • SHA1

      fdbb82d380e98a48a58de021b90f116cedc01298

    • SHA256

      3e81ac827824478a5532846c42bdbf5d469beab9793092542419d0c5ebcf52ac

    • SHA512

      01b5787a93d971f36238d9754db108e5d8133ccde528e7250c0e1acc3d3693f8a628d12fc8f14cdfff55236c0549e55a679b432f7f0e59f1c1bf7ec7ae2e2abf

    • SSDEEP

      393216:jCSARbMb/m3pbsLG/PcjGsoTZleDXdk5I8g8F9/75oQlvQ+:+SkMbKx/PcsTZlofAFZlvQ

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks