Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15-08-2024 11:22

General

  • Target

    R B X 1 2 5/Roblox Executor.exe

  • Size

    610KB

  • MD5

    2744b07299dfa1999cff269ea72a2b80

  • SHA1

    8f1527af2b2b9f0134d834ab959902ac99b9783f

  • SHA256

    91791c26f8831977e9d0b64d25e4e699b6b4e8360377ce3bfec803c5683470ce

  • SHA512

    724d7154965865a626b5369afff7d911198d9d9bef728cde2680a0f09565520b69044d21bf063bce5246b52bdad5c46636dd1c1b73a1e0183272a9c1f27be3ab

  • SSDEEP

    12288:s/4LI3Kvjc6xh0J5P4bEPcL9XTWMsmNkBFV2KpkL9nI9rNtFamI3v6WZDtWdD+A5:4B3P6IR4bEPU

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\R B X 1 2 5\Roblox Executor.exe
    "C:\Users\Admin\AppData\Local\Temp\R B X 1 2 5\Roblox Executor.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Roaming\d3d9x.dll

    Filesize

    508KB

    MD5

    27e1b4e12893e15184853ab2a3fef0ea

    SHA1

    394dcd236b89875581cbfa6d3317235f62fb629d

    SHA256

    aeb9f95c5379963ca1d7fcf564fb83f3156aabe75c4569f5e5627012a902a7f2

    SHA512

    a19b025bdad5972ed9225ca49e9e1dec14d68b0b52f86a22df410224cb4fdaa8fa65b084e465df1087bebcd4127b60dc2e6b3e4f05081fde5d59e7cb7c9b3e23

  • memory/2104-0-0x000000007427E000-0x000000007427F000-memory.dmp

    Filesize

    4KB

  • memory/2104-1-0x0000000000160000-0x00000000001FE000-memory.dmp

    Filesize

    632KB

  • memory/2104-6-0x0000000074270000-0x000000007495E000-memory.dmp

    Filesize

    6.9MB