Overview

overview

10

Static

static

10

Roblox.exe

windows7-x64

10

Roblox.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Roblox.exe

  • Size

    171KB

  • MD5

    225630debc0260ec0a391e4324197506

  • SHA1

    1fcfa980fd86afaf777b1a189e3cbd60912af698

  • SHA256

    56952733c92f9af8196b9c96030646b0a31f8130bf120cbdeea3ed9800fbd609

  • SHA512

    05e6062fe743fff28ce70888cda26d52ef313991e3062d65e89e92685f4fccf28a11a11ac1815a68df99773eb4084f1f49897f883e9f771f23fe2fa72cf05d63

  • SSDEEP

    3072:SYm85/kAzbLZl0gjPtaO5BoDBz65/M6If+3Js+3JFkKeTne:SuMAzbzNeDxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

agency-lottery.gl.at.ply.gg:21526

Attributes
  • Install_directory

    %AppData%

  • install_file

    startup.exe

  • telegram

    https://api.telegram.org/bot7375237961:AAFlPWXmEriRUUWDWeG1DeZifKaAFaWD10Q/sendMessage?chat_id=7534517325

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Roblox.exe
    .exe windows:4 windows x86 arch:x86

    Password: 19751975

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections