cdb0a360cca7a5099c2d2357be1a833e032ffdeb3f467a6fac845f6bb77031c9 | Triage

Resubmissions

11-08-2024 01:08

240811-bg9t6asaqe 7

11-08-2024 01:05

240811-bftfsasakf 7

Sharing

General

Target

Roblox Account Manager.exe
Size

5.2MB
Sample

240811-bg9t6asaqe
MD5

a057fae0c8c97ee6cf2c12fb7bcf034d
SHA1

64fe0eb242b5c3f9c42f4f2c1685e4a36708e4f6
SHA256

cdb0a360cca7a5099c2d2357be1a833e032ffdeb3f467a6fac845f6bb77031c9
SHA512

447cf69cf39ef19d098f4ab223d6ad9d760efb1eabb1bb0dac27fd2e55ac14c5a6502f2edd00b199d2db702e38551065bcc087c8df931360e769443908a4d200
SSDEEP

98304:b2bT1Qm7d9GP4i7q0LTWgtUmWzmSyZs9S8Z/LywnrSkqXf0Fb7WnhNMYkj7:4Qm59q/tUhzmS9zZ/mY+kSIb7ahNMYk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Roblox Account Manager.exe
- Size
  
  5.2MB
- MD5
  
  a057fae0c8c97ee6cf2c12fb7bcf034d
- SHA1
  
  64fe0eb242b5c3f9c42f4f2c1685e4a36708e4f6
- SHA256
  
  cdb0a360cca7a5099c2d2357be1a833e032ffdeb3f467a6fac845f6bb77031c9
- SHA512
  
  447cf69cf39ef19d098f4ab223d6ad9d760efb1eabb1bb0dac27fd2e55ac14c5a6502f2edd00b199d2db702e38551065bcc087c8df931360e769443908a4d200
- SSDEEP
  
  98304:b2bT1Qm7d9GP4i7q0LTWgtUmWzmSyZs9S8Z/LywnrSkqXf0Fb7WnhNMYkj7:4Qm59q/tUhzmS9zZ/mY+kSIb7ahNMYk
Score

7^/10

discovery
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1