Resubmissions

05-09-2024 21:46

240905-1m1k4szfrr 7

05-09-2024 21:44

240905-1lx4la1cmg 5

05-09-2024 21:25

240905-z9yvcszblr 6

05-09-2024 21:14

240905-z3jf4azflb 10

05-09-2024 21:12

240905-z2kmrszfka 3

General

  • Target

    https://chromewebstore.google.com/detail/roblox-for-free/hchahigddjfnomcffodpdldcelbdokca

  • Sample

    240905-1m1k4szfrr

Malware Config

Targets

    • Target

      https://chromewebstore.google.com/detail/roblox-for-free/hchahigddjfnomcffodpdldcelbdokca

    • Executes dropped EXE

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks