Overview

overview

10

Static

static

10

roblox-installer.jar

windows7-x64

1

roblox-installer.jar

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    roblox-installer.jar

  • Size

    1.8MB

  • Sample

    250107-b2ngnaxqas

  • MD5

    b4a891ea3811b35e83660512e89e6147

  • SHA1

    a6858bdf3d1440a2b31a631cfb6202e29035f133

  • SHA256

    22e8bfcaea188e87e23bd4828feccbf835bd371190174fd6514dab23ad39a7e8

  • SHA512

    12f461f8521647807f9aa31419892d8dd05044d74ade1475c1cc83f504c6a37133177d88c9571a48e7169687295d44ee233321d96f493cc744811d6f17cc1155

  • SSDEEP

    49152:zSQSuJs1UV9AuuTIuV/X2avJW9M7efBwxg+te1:zjSbUVJkIuV/XVW5Q3ty

Score
10/10
adwindpersistence

Malware Config

Targets

    • Target

      roblox-installer.jar

    • Size

      1.8MB

    • MD5

      b4a891ea3811b35e83660512e89e6147

    • SHA1

      a6858bdf3d1440a2b31a631cfb6202e29035f133

    • SHA256

      22e8bfcaea188e87e23bd4828feccbf835bd371190174fd6514dab23ad39a7e8

    • SHA512

      12f461f8521647807f9aa31419892d8dd05044d74ade1475c1cc83f504c6a37133177d88c9571a48e7169687295d44ee233321d96f493cc744811d6f17cc1155

    • SSDEEP

      49152:zSQSuJs1UV9AuuTIuV/X2avJW9M7efBwxg+te1:zjSbUVJkIuV/XVW5Q3ty

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks