General
- Target Roblox.exe
- Size 73.6MB
- Sample251219-3k47maxley
- SHA256 d3d45e559a0cbb3e4eb85ae13e35f5827e32094f321c86215b494d0e4c2c4e96
- MD5 3e32f0128912e466b6cc842aa5fe776e
- SHA1 0c0e412d0406edf2c34a9fd298c697d09aeb400a
- SHA512 e5aa29995e0f2e998eab74eb7771d5d7f942ac9c144d602a0c5edf09e4c28b42f15cce140c43430a03d610570c6ec1f7943f6326f1a015d9dbb28ad74cea48d3
- SSDEEP 1572864:+9zzTbci+8PkxEWA8WGUb9jETHPQmMpnx9luHY7otnq/2cKoeTZeuMGS2aUXfjfE:+9jbUqkEWA8GjcvPOn36MeTg12
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Roblox.exe
Resource
win10ltsc2021-20251218-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target Roblox.exe
- Size 73.6MB
- SHA256 d3d45e559a0cbb3e4eb85ae13e35f5827e32094f321c86215b494d0e4c2c4e96
- MD5 3e32f0128912e466b6cc842aa5fe776e
- SHA1 0c0e412d0406edf2c34a9fd298c697d09aeb400a
- SHA512 e5aa29995e0f2e998eab74eb7771d5d7f942ac9c144d602a0c5edf09e4c28b42f15cce140c43430a03d610570c6ec1f7943f6326f1a015d9dbb28ad74cea48d3
- SSDEEP 1572864:+9zzTbci+8PkxEWA8WGUb9jETHPQmMpnx9luHY7otnq/2cKoeTZeuMGS2aUXfjfE:+9jbUqkEWA8GjcvPOn36MeTg12
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories