General

  • Target

    ROBLOX Cheat.zip

  • Size

    21.0MB

  • MD5

    fd1d091bf6b947728e092e50174e3a6f

  • SHA1

    fcb44f5ec1b3eca3a5fb0abbd0b26ff05ce48dd0

  • SHA256

    b59b4218a74d81b5efed3ead4012f752cb687fbcf383cd370805dffaf9dcc951

  • SHA512

    836af0b62258ac5cbc5014f1c2deb533f1c9a5a2a8c4bee13d0b48545adaf9cf9f79ad13c49eb72b82154b63f7683f48e74d90cf0024466a633db1c4d062a850

  • SSDEEP

    393216:COCMj1RUE3bUXOb5xklPBCNyYzE9t8svlUhnwXG3+iho0r4nMrJzUWvZ:COL7rUSbGY89WPh6tK4neJ4U

Score
10/10

Malware Config

Extracted

Family

lumma

Signatures

  • Lumma family
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • ROBLOX Cheat.zip
    .zip

    Password: 8866

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • Qt5Positioning.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    c3ad7fa53f1cdce5fd347b75c91d4a67


    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupport.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    916ba1ac85472e1ce14facf380585b8f


    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    abde8bb7b59607960cc46a82df0c6881


    Headers

    Imports

    Exports

    Sections

  • Qt5QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    ae71555b75f63b6ecc0dd96b9c7a187e


    Headers

    Imports

    Exports

    Sections

  • Qt5QmlWorkerScript.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    a5467ce1566bbb41901390ff0103e3b7


    Headers

    Imports

    Exports

    Sections

  • Qt5Quick.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    c8dfad7efb62649eb406291eaab1aabf


    Headers

    Imports

    Exports

    Sections

  • Qt5QuickControls2.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    6d30490561f57b201cb1cf15131cab85


    Headers

    Imports

    Exports

    Sections

  • SoftWare(1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SoftWare(2).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    403d8cc0d31f841d5bbf6b82c1ea957d


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    62b94bd6c48f8e0f6d82aa2752720dbe


    Headers

    Imports

    Exports

    Sections

  • manual/Manual.txt
  • netcenter.dll
  • settings/cef_100_percent.pak
  • settings/cef_200_percent.pak
  • settings/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    a21402ea151644d20096e026ec8b9d63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/dx12user.settings
  • settings/dx12user.settings.bak
  • settings/icudtl.dat
  • settings/input.settings
  • settings/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/profile.settings