General

  • Target

    R B X 1 2 5.rar

  • Size

    9.7MB

  • MD5

    775d1f7409c0507d2864d7bd283ef914

  • SHA1

    fc28466f13da0f88cde02bd70b79e8a3f093c4e3

  • SHA256

    0bf30e9e9446bb909d3459669312f5982f6af0a3dd1d61eb141c386785b52331

  • SHA512

    f3e190834aca8fa56683148ce012622360fdc575eccb6a667021df6d92cd260a57689fc7b9ca3ff47bcbeac1f2f4a8679fb46228751e8756a6925f4018cf6573

  • SSDEEP

    196608:pzg44wZIYG1SyNmDfJjO8pMjHWXjBawNBxm2gMTHNV4Y/ry++jn5H9I:m5wZIL1TCEXjHwBawzxNnrG5j5G

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • R B X 1 2 5.rar
    .rar

    Password: 2024

  • R B X 1 2 5/Client.config
    .exe windows:6 windows x86 arch:x86

    Password: 2024

    59bafed0fa1382619aa4b845f3f73552


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • R B X 1 2 5/Roblox Executor.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2024

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • R B X 1 2 5/ai.cfg
  • R B X 1 2 5/cacert.pem
  • R B X 1 2 5/config.vdf