General

  • Target

    Roblox Cheat.zip

  • Size

    411KB

  • Sample

    240710-bvgerszdrb

  • MD5

    9bedff0ded2dee6a776641c1d2b1e5ab

  • SHA1

    1fe0bcbe3232f6438553e5b0a0ce7df297a55410

  • SHA256

    757933af3e75f5094680b67b41e95cda7fc99e717781d7424ca53137f4e2a08a

  • SHA512

    7238984659f3027138a16e11ba0221ada9cd809774fb6d11b140ae6864591ec67db2418d091460273347873e956fc042849e770ac28b1fa8a54a03fc8724a8dd

  • SSDEEP

    6144:lcs40hPUd2Q+gzr1i4Vx48tm+M4hBSO76Jcix2wsr5RnZKvKlbiM3xMVhRhOFnuf:rdUoPgtVxJY+M4HZYxK1KilbT7UD+e9d

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://extorteauhhwigw.shop/api

https://bouncedgowp.shop/api

https://bannngwko.shop/api

https://bargainnykwo.shop/api

https://affecthorsedpo.shop/api

https://radiationnopp.shop/api

https://answerrsdo.shop/api

https://publicitttyps.shop/api

https://benchillppwo.shop/api

https://reinforcedirectorywd.shop/api

Targets

    • Target

      Roblox Cheat/app/apper.dll

    • Size

      84KB

    • MD5

      ed0e1f5710b2bf5b3ca3136cd308cc23

    • SHA1

      da966bf237ac052116366eb0616fae2cf36fee18

    • SHA256

      57b5197e11101c2e06bdd86d238fbb6c8a3ea565591ca9648200c3ee3a03dbc2

    • SHA512

      6b1274f6300074a8b765f16b54947aded0fc1bff4e6feb798ff17977f9149bff25f7e63f8cd2a1ad793b01d1345a9ba054c5e578b6dbdc9b30ab95439fdf412c

    • SSDEEP

      3:H:H

    Score
    1/10
    • Target

      Roblox Cheat/cfg.dll

    • Size

      118KB

    • MD5

      dfeaa87a10db2d555593e92f295f5a25

    • SHA1

      67e42c9b61e56e33fc6d7ab94ca921860628819e

    • SHA256

      36cc45bfe3b63ea42af564dd2c221219f7fb2e3f3ce93ca8cba3a53539bceb0f

    • SHA512

      891002e2a94dce513706709dad5e78419f3205cc8e102b048ed4d405a84fa5c211711a0b9cc311cc69f6602681dd7da8ac3cc1760828c374b06d51e203872062

    • SSDEEP

      3:H:H

    Score
    1/10
    • Target

      Roblox Cheat/data/fover.dll

    • Size

      67KB

    • MD5

      decaca5914d4409681c179f0f2a314f3

    • SHA1

      2a446b3ac2b9c8ec1b53da9a1a45197052a11602

    • SHA256

      4d32733ccac8b13505472b3b107e5fcd313d8e192433997dfd5f33548d4245b7

    • SHA512

      baa51713b9fedd13d2b02f139cdf656bd1ba3a7fffd320f75b3e2b98ca6bdf114c6bfa7fc01b59c79a7603db0906a7d8a520b79092d3e51e6b22626be6130986

    • SSDEEP

      3:n:n

    Score
    1/10
    • Target

      Roblox Cheat/data/setting.dll

    • Size

      135KB

    • MD5

      55b437f743590610be2a2501cf2c1582

    • SHA1

      41b7e82ab633aa3e8ae7dfbad1e716d730a08a93

    • SHA256

      d75c63c3cd03ee4000fe06115b4f03d60d18e075a29ff455ea6ce2c0a6add84f

    • SHA512

      c11d58d2b9a469d2a0203808cb731bf4b1c6c3052a4d308ca0f9a1148c53d7daeba0dd761408880c0bffc82cecb2a83b8097d42faab1816819dde1d049fcae85

    • SSDEEP

      3:n:n

    Score
    1/10
    • Target

      Roblox Cheat/data/vkfow2p.dll

    • Size

      118KB

    • MD5

      dfeaa87a10db2d555593e92f295f5a25

    • SHA1

      67e42c9b61e56e33fc6d7ab94ca921860628819e

    • SHA256

      36cc45bfe3b63ea42af564dd2c221219f7fb2e3f3ce93ca8cba3a53539bceb0f

    • SHA512

      891002e2a94dce513706709dad5e78419f3205cc8e102b048ed4d405a84fa5c211711a0b9cc311cc69f6602681dd7da8ac3cc1760828c374b06d51e203872062

    • SSDEEP

      3:H:H

    Score
    1/10
    • Target

      Roblox Cheat/installer.exe.exe

    • Size

      517KB

    • MD5

      76133eb1b8f224e5152c25dcec2d2795

    • SHA1

      8c3393dd5004a1eab62dc90896cec5e6d62690f7

    • SHA256

      67446a4d3e39ba68c0a01cdf63fa91ec735f6d92933c66664f469c83e6ee76fe

    • SHA512

      dbabe9b2755b44bbe491f477fb8bf1901cb8c35542a7be8861d2f96bbdb94f92be4812721cbdf826d9fbdf017601a968579061309755dc3c4b41134168f92343

    • SSDEEP

      12288:+WSPwZmxGCHk4T8ie1Y/NtibpBD/cs+CDB:+3PwZg3RQieKtapBD/t+CD

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Suspicious use of SetThreadContext

    • Target

      Roblox Cheat/updater.dll

    • Size

      67KB

    • MD5

      decaca5914d4409681c179f0f2a314f3

    • SHA1

      2a446b3ac2b9c8ec1b53da9a1a45197052a11602

    • SHA256

      4d32733ccac8b13505472b3b107e5fcd313d8e192433997dfd5f33548d4245b7

    • SHA512

      baa51713b9fedd13d2b02f139cdf656bd1ba3a7fffd320f75b3e2b98ca6bdf114c6bfa7fc01b59c79a7603db0906a7d8a520b79092d3e51e6b22626be6130986

    • SSDEEP

      3:n:n

    Score
    1/10
    • Target

      Roblox Cheat/version.dll

    • Size

      203KB

    • MD5

      a5b8f7deff0734c7e985d2a756b22ff8

    • SHA1

      656f8fe90c2d59942171f1e081827b3d038c1414

    • SHA256

      9d86f442f65c177cf2a6e659c974ce81e16acaa2663c378c6c6052da8e9c3e6a

    • SHA512

      404aa5fd2c6823fe71ff0c2b6dc341b64772b936645e69a805e67a4217f3fe1d73b398eae445f2e7745324f4ae6f23707f5258027fbe1ceb98947b59c44897f0

    • SSDEEP

      3:n:n

    Score
    1/10

MITRE ATT&CK Matrix

Tasks