Resubmissions

03-12-2024 17:31

241203-v3syba1men 8

03-12-2024 17:26

241203-vz6d8s1len 8

General

  • Target

    https://www.roblox.com/redeem

  • Sample

    241203-v3syba1men

Malware Config

Targets

    • Target

      https://www.roblox.com/redeem

    • Downloads MZ/PE file

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks