General

  • Target

    Robux_Generator.zip

  • Size

    7.8MB

  • Sample

    240811-pcckratakf

  • MD5

    714ae5a46cb48b953a569e7bd940236b

  • SHA1

    5c63fb3d69b93189b11e3fd5c3762f4738b35ee1

  • SHA256

    0dd72c3b6bc6767b10eabf060d5bb2e971bc2912767b95f7547548dabaf7de56

  • SHA512

    09fefe116a0ffe2372e9354349a5c148bd00473b64296917ac5321a8060b6bd0f97315f2e348dad94eb203358923dacdceab27e73d952bb5f144e672319a4dff

  • SSDEEP

    196608:1hr2fWiJ45JuH8lpJYr75+U2ji7OtSakNTWse1:8dyzGUewkCL

Malware Config

Targets

    • Target

      RobuxGifter/RobuxGifter.exe

    • Size

      1.7MB

    • MD5

      1b27d27ed98ff00de2a56051ecb9d5ad

    • SHA1

      007e8b77f19218f857977127a6f26234483a544d

    • SHA256

      7b43826e18d40c1ff092abdd0f59762641dea554c16f9e0fd9dade9e64f162b4

    • SHA512

      008d76755ebc929a567917054f50ba341e6e8abb732524bdfecdb900f356d4ed1cd1def5eb4583ac717f708e1b15f9296878ff1481aa185633db6d67d962c5b4

    • SSDEEP

      49152:hgnuNPq22N5VMKbh5JyoQIk+SNvzKCNdvLc7tJrP6eZX/ZCzqx2:6nYqpd/FFknN7KCst96a0

    Score
    1/10
    • Target

      RobuxGifter/_internal/VCRUNTIME140.dll

    • Size

      116KB

    • MD5

      be8dbe2dc77ebe7f88f910c61aec691a

    • SHA1

      a19f08bb2b1c1de5bb61daf9f2304531321e0e40

    • SHA256

      4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

    • SHA512

      0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

    • SSDEEP

      1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho

    Score
    1/10
    • Target

      RobuxGifter/_internal/_bz2.pyd

    • Size

      82KB

    • MD5

      90f58f625a6655f80c35532a087a0319

    • SHA1

      d4a7834201bd796dc786b0eb923f8ec5d60f719b

    • SHA256

      bd8621fcc901fa1de3961d93184f61ea71068c436794af2a4449738ccf949946

    • SHA512

      b5bb1ecc195700ad7bea5b025503edd3770b1f845f9beee4b067235c4e63496d6e0b19bdd2a42a1b6591d1131a2dc9f627b2ae8036e294300bb6983ecd644dc8

    • SSDEEP

      1536:ES7z7Sj2u5ia5ifC83zYLzbCK8CkotIpCVF7SyTUxIS:/7z+jw3MzCNCkotIpCVF+

    Score
    1/10
    • Target

      RobuxGifter/_internal/_decimal.pyd

    • Size

      247KB

    • MD5

      f78f9855d2a7ca940b6be51d68b80bf2

    • SHA1

      fd8af3dbd7b0ea3de2274517c74186cb7cd81a05

    • SHA256

      d4ae192bbd4627fc9487a2c1cd9869d1b461c20cfd338194e87f5cf882bbed12

    • SHA512

      6b68c434a6f8c436d890d3c1229d332bd878e5777c421799f84d79679e998b95d2d4a013b09f50c5de4c6a85fcceb796f3c486e36a10cbac509a0da8d8102b18

    • SSDEEP

      6144:kgd/2mZLgPFIY9qWM53pLW1AepppzoeteKU:JZLgPykeKU

    Score
    1/10
    • Target

      RobuxGifter/_internal/_hashlib.pyd

    • Size

      64KB

    • MD5

      8baeb2bd6e52ba38f445ef71ef43a6b8

    • SHA1

      4132f9cd06343ef8b5b60dc8a62be049aa3270c2

    • SHA256

      6c50c9801a5caf0bb52b384f9a0d5a4aa182ca835f293a39e8999cf6edf2f087

    • SHA512

      804a4e19ea622646cea9e0f8c1e284b7f2d02f3620199fa6930dbdadc654fa137c1e12757f87c3a1a71ceff9244aa2f598ee70d345469ca32a0400563fe3aa65

    • SSDEEP

      1536:uElYij3wzR1lBafLEmIRhFIpOIi7SyHqxn:zYdBaTEmghFIpOIiu

    Score
    1/10
    • Target

      RobuxGifter/_internal/_lzma.pyd

    • Size

      155KB

    • MD5

      cf8de1137f36141afd9ff7c52a3264ee

    • SHA1

      afde95a1d7a545d913387624ef48c60f23cf4a3f

    • SHA256

      22d10e2d6ad3e3ed3c49eb79ab69a81aaa9d16aeca7f948da2fe80877f106c16

    • SHA512

      821985ff5bc421bd16b2fa5f77f1f4bf8472d0d1564bc5768e4dbe866ec52865a98356bb3ef23a380058acd0a25cd5a40a1e0dae479f15863e48c4482c89a03f

    • SSDEEP

      3072:kEVLLSVeexIDteznfV9mNoNMuX4mZp7zuNtIpZ1uV:kEVHbeye9YON1buNN

    Score
    1/10
    • Target

      encodings/cp720.pyc

    • Size

      3KB

    • MD5

      4640883191bbadde7c08765afd80aa72

    • SHA1

      a49bcd8396f3bd835e5cfbafdd47457f4e386354

    • SHA256

      f64b1166984c56a90fd1b3cce2169ed577e4e4bad4eef8d2c4740c7a1275ab52

    • SHA512

      218f19ed3c691536be967288de3765aeadc54ba8d8977241dde8d270080803bba169e8ec218bee9cdc84bf4e9ef88880086b7bedf667175e2ccd2a47712f6d72

    Score
    3/10
    • Target

      encodings/cp737.pyc

    • Size

      13KB

    • MD5

      2fe59754e56402a49f83c8bd85ef3944

    • SHA1

      39a8c03e6a7657c096d100df0ae4d53192113aa1

    • SHA256

      7efc41fcee18d1bc3829d98990b0ec550119b6f792816b749824e6700bbd5433

    • SHA512

      aa398e77f1dab1b219a4cd5fada97ef20bd4a4b74217cf652c3d2e0f579b756894d7ca92440200bddb31793b3b29c1f19432b1807fac5ea0dfb812fbcb3fccba

    • SSDEEP

      192:vamHsrLEjfJOPsBHuLShNz7PTVs+WEbHZQ7n7SJ0E1GTnGRFCY/5VAXE2JHFtoSo:iJQo0BHu+1s+97ZQdEkTnGH9PA0l8i

    Score
    3/10
    • Target

      encodings/cp775.pyc

    • Size

      13KB

    • MD5

      83601f4304a5e2d45c0488acc35178ee

    • SHA1

      a4eff29fa3036c7f8f6b975f58c3345261b4e193

    • SHA256

      051c7c8e27dfdc423726722bf4d26033425e805f530d5ac9fb44e3811409285d

    • SHA512

      ac26c0dd667b12e998a57871ebf8bfdab64d7bfa933242994731e72acd887b98b5b2fd2fc3ff9fc09730352adcbe82bb44fc444a2ee6999358b1977fb4aa29d6

    • SSDEEP

      192:6amwB9TEJfPWQSvNz7PTVO+tX7lNpnkqJX1GTnGRtFyzF5VAXE2JHFtoSmhF8p:vni2vHO+tLlN1kTnG0RA0R8p

    Score
    3/10
    • Target

      encodings/cp850.pyc

    • Size

      12KB

    • MD5

      1487e2d3cffcd3747e853e003203ce5d

    • SHA1

      967ea9630cb2199698b6f31082956c687e78d614

    • SHA256

      9afd0c069be0c6132e1893c62bf9f979702a368a0d84d6a71476217488463989

    • SHA512

      76f0643fa2667b060cebfa2ac4edbc009aad0af34827c0e8ecdb6b55059eba61caa5fe321a621beb6ea519394bf42eb348ff497877a218a1316b70925eca7f77

    • SSDEEP

      192:6amdIaSCyfPuowaSjNz7PTV2+EMTG1FnHdWJb1GTnGRtFyz7nUAY1FtoSmha86:v8cJuNFL2+E7NUkTnG0HUAY/86

    Score
    3/10
    • Target

      encodings/cp852.pyc

    • Size

      13KB

    • MD5

      1a873556423af594358d27b4136ced97

    • SHA1

      3dd97219b02afa8fc597713c879936074f19b7db

    • SHA256

      e1656ef2e299d5328aae13019568365cedf509c3f755eb061f5b0743ec5a375f

    • SHA512

      04d6fb8365adc9253a58f4e1ff5f4acea4cefac57a130aedd4e0f01f03124ca603b342ec0a586f99ae42f23bbf7902786f33c2d228601b7dccd9799083de46f5

    • SSDEEP

      192:5am47vNBf/Rss6LsSJNz7PTVw+ba6qHcnHelIJIE1GTnGRtFyp5VAXE2JHFtoSmd:sZ7vDhsscNw+zqmaEkTnG0hA0I8p

    Score
    3/10
    • Target

      encodings/cp855.pyc

    • Size

      13KB

    • MD5

      9fa733f7aef56c4d952c69ee827f5429

    • SHA1

      b0e9f607ecf50cdbc23e35bb6d37dbf4f4b6e40d

    • SHA256

      07f9f99444b4c38120fcec281f6a842ba0d71a2e12cb1ff4d462b7f8c2d97df5

    • SHA512

      577d290d76145c30318f635156ea2d0dfc5a86a7026105bf0c18611a717e879eb3a93a80be1bb16c4c960d08e378017316b6f8e82df83439b430e95fd02fd182

    • SSDEEP

      192:damz6wjfVInfUBKS6Nz7PTV1B+erEB86onTm5zJsK1GTnGR8CY/5VAXE2JHFtoSG:46cMBVG1B+eg8+KKkTnGG9PA0+8p

    Score
    3/10
    • Target

      encodings/cp856.pyc

    • Size

      3KB

    • MD5

      8786e024b8784ad609ba7c7295d7794a

    • SHA1

      5f24b7be76d335cdfdccc498438aa21ebb7c2003

    • SHA256

      70f0c2fd002f5b129c3f7ed74a0bf33ed853bc4da3fd86e9b9ca7f8ca18a6d3c

    • SHA512

      924de34e6152e43495ebc4c062ec687a0b3dbdf1cd01fc53e4eeb94223c27fb5b9d5c3dc197206cb74047edacca4c9063223f021ead01633cf820b2eea6e7cd0

    Score
    3/10
    • Target

      encodings/cp857.pyc

    • Size

      12KB

    • MD5

      bdc25e2f85a9b08d148e9e06e44c7a92

    • SHA1

      7b5225658572ca6249259e0df3ef0c21f5599e22

    • SHA256

      38affcceffbcf2b72f7aa5c5d13dea5335abe37b482f158d4c21c420d2d4c025

    • SHA512

      cd221a8e52966f90a090d84308775223447c327a135003ae4158496d10c6546e9086df52d5d4a15f77cdc9f984711a0708105f16abe7510d46a07b8117e71abc

    • SSDEEP

      192:DamMI5vSCyfPuzKSANz7PTVR+yN8bQrGnHtOwJgEoOFUpny0BgXKVMUzaln8ON:+5I5KJuzVIR+yDrQsfJOFUpBgEa2ON

    Score
    3/10
    • Target

      encodings/cp858.pyc

    • Size

      12KB

    • MD5

      3a5cb9ac4c64f6213ea7a5a2591d8ff1

    • SHA1

      dc6058fb0cf632bb20791a673cc0b57df126b321

    • SHA256

      5c1d4c2436a8cbb919f6f177ac5f4814b5694270612d2ba63a86065fb05fb66c

    • SHA512

      3e2b230da9619152c7a94bd4b723f99ae6a6b3701317b592534a50949c8db0df847d46262339a7a39abf78315fade26d16fe96ea28087d389f74593c86d83a69

    • SSDEEP

      192:6amdIaSCyfPuos7Nz7PTVu+EMTGTanHdfJb1GTnGRtFyz7nUAY1FtoSmha86:v8cJuvTu+EhMzkTnG0HUAY/86

    Score
    3/10
    • Target

      encodings/cp860.pyc

    • Size

      12KB

    • MD5

      b96883976c7c7214e3c7d3f128de9fe7

    • SHA1

      b6f170198528742c5ee9bf173c84feb7d1628e37

    • SHA256

      a0964bfeef2df82ecfef8ec4e29b01950243e0aa7c4f4ea30b1d49d3dfc2e143

    • SHA512

      30c95902b26e9f28be72e83ae84ae083a36c2cb81bcb121fcb7fe788a9394a6d53a5460332ff72f013c2c3762b8fb1126ae942178b9275d696d143f4af2896df

    • SSDEEP

      192:Qam9erRrqfPWWDfMwS2Nz7PTVD+GYl0j23nHxkioJJ1GTnGRtFyz7nuXE2JHFtoN:lMeM24f6yD+GZAdMkTnG0Hu0e8p

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

pyinstaller
Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

discovery
Score
3/10

behavioral14

Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10