General

  • Target

    roblox.exe.zip

  • Size

    42KB

  • MD5

    87b12ff8e073fbdef673148d57b8bb58

  • SHA1

    c7d7ab8a13827c51ab3253ab27ce41d4f37a6ef6

  • SHA256

    f836f434c1838848a04ad5efd4f15e17fc7dff033dd8a1d75fab318c0aad07f5

  • SHA512

    5002ecfd03488227918b2d125060d467ed582a54b05ef9e81e8b667e0e23de705cf3a8c614f6a713c630f73f7f412cddbddb6df66ba3bb2e6afcb44878c5537c

  • SSDEEP

    768:0CFEVWohxVp/pzJs2YHuBWs8ZIBpIAwaMLygG0DHlCu5yZkTPr3Bw/HpMe4ai2ux:rFFolpzs2ei8EIAwaMLDjDctc3WH+t2K

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • roblox.exe.zip
    .zip
  • roblox.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections