Resubmissions

07-08-2024 09:48

240807-lsvjqawhmq 10

General

  • Target

    ROBLOX Cheat.zip

  • Size

    20.7MB

  • MD5

    eb867b77728f9a008fbdf0ee16a4c9bf

  • SHA1

    edb2a50f71245a75026fbcc6b397e2b4b24bb268

  • SHA256

    f5f307c22117803ffcc5d910a46431420299a7a0fe579c0c0ea7b67cd3bbd23b

  • SHA512

    69903017656f94dd0d4e64624a9b19a5023cefe31fedfb0fb780ea9b53e71d8482d6c6f4cab191f18726fd4e24a370844fe901e6277a4d53dd8adf90df3eeb69

  • SSDEEP

    393216:COCMj1RUE3bUXOb5xklPBCNyYzE9t8svlUhnwXG3+iho0r4nMrJzNbt:COL7rUSbGY89WPh6tK4neJJbt

Score
10/10

Malware Config

Extracted

Family

lumma

Signatures

  • Lumma family
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • ROBLOX Cheat.zip
    .zip

    Password: 8866

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • Qt5Positioning.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    c3ad7fa53f1cdce5fd347b75c91d4a67


    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupport.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    916ba1ac85472e1ce14facf380585b8f


    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    abde8bb7b59607960cc46a82df0c6881


    Headers

    Imports

    Exports

    Sections

  • Qt5QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    ae71555b75f63b6ecc0dd96b9c7a187e


    Headers

    Imports

    Exports

    Sections

  • Qt5QmlWorkerScript.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    a5467ce1566bbb41901390ff0103e3b7


    Headers

    Imports

    Exports

    Sections

  • Qt5Quick.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    c8dfad7efb62649eb406291eaab1aabf


    Headers

    Imports

    Exports

    Sections

  • Qt5QuickControls2.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    6d30490561f57b201cb1cf15131cab85


    Headers

    Imports

    Exports

    Sections

  • SoftWare(1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SoftWare(2).exe
    .exe windows:6 windows x86 arch:x86

    2ca53fefee819fb338d7a7a06e21cce5


    Headers

    Imports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    403d8cc0d31f841d5bbf6b82c1ea957d


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    62b94bd6c48f8e0f6d82aa2752720dbe


    Headers

    Imports

    Exports

    Sections

  • manual/Manual.txt
  • msvcp140.dll
  • netcenter.dll
  • settings/cef_100_percent.pak
  • settings/cef_200_percent.pak
  • settings/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    a21402ea151644d20096e026ec8b9d63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/dx12user.settings
  • settings/dx12user.settings.bak
  • settings/icudtl.dat
  • settings/input.settings
  • settings/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings/profile.settings