General

  • Target

    R B X D 2 5.rar

  • Size

    9.7MB

  • MD5

    1c7b93eb46e110fdeda1eb23a3a810cd

  • SHA1

    bf23d1dcd6bd4546bd14b6a44c6e58239af29851

  • SHA256

    ad329ddc9cf9c640ca7705fc3ce47c717f796b55466ec0882509f8596b35ae60

  • SHA512

    5c085bc838f8c0587602c7025c31ba813871d91cf9dbf1605753f7a3ab3a0d06e0e67608c2b383877469205471656aba8e7a71a4d9e17e84bb2a09d1db22683a

  • SSDEEP

    196608:IknltSmQx76wYWhEBDvwHXMsGU6l/C+c23XQ72x7qNL9AUyjM4DmM:v0zl6wYWKBDoH8sFMnc2AhNL9imM

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • R B X D 2 5.rar
    .rar

    Password: 2024

  • R B X D 2 5/Client.config
    .exe windows:6 windows x86 arch:x86

    Password: 2024

    59bafed0fa1382619aa4b845f3f73552


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • R B X D 2 5/Roblox Executor.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2024

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • R B X D 2 5/ai.cfg
  • R B X D 2 5/cacert.pem
  • R B X D 2 5/config.vdf