General

  • Target

    https://www.roblox.com/redeem

  • Sample

    241203-v9zdnswkhy

Malware Config

Targets

    • Target

      https://www.roblox.com/redeem

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks