f9bc2fe453ddc56429e72a42a4d078b3930f17a36b84f16e15f5cbac80266705

General

Target
FP_Roblox_Unlocker_3.4.zip
Size 533KB
Sample260502-pff3caav9j
SHA256 f9bc2fe453ddc56429e72a42a4d078b3930f17a36b84f16e15f5cbac80266705
MD5 b58ce27cbef56fbf00b7484e996ef91d
SHA1 6b4166426d3242ca8f14be74332bd41560d3b78e
SHA512 2650f63f61084c276b4138d7fc1c57e9234c9032e9bfff97f5c13e64967f0e0715a3d31b53cc121e52c5c173604550ed23beed6188b51d3ea7af4a1690064dc6
SSDEEP 12288:4eCEhtG9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakW:PtIA/f0Za6TCXKBxlF
TLSH
T1B7C42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Launch.bat
- Size 25B
- SHA256 b54ea465f77f1eb726d3244aa52d13c103ad9c4fc5a15061b7067347896b433c
- MD5 7f8763a16a923fc1a188fd04dacbfaaf
- SHA1 0aec3fdd44982b06ac84c51a74ad353156909e33
- SHA512 e84da911832044ab8a46d4fc3e72d7c3ed91ff3d904aba64abbf63b51c1f2e4d3e4c7bb73d93218d1a24b1a600119a6600136eab5ed4f2b230773236abf5563e
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  license.txt
- Size 301KB
- SHA256 357cd0a1601d24bbb7949637b352b0ace1f30f51f788a03cafa98316068938e0
- MD5 1770fcdf879803a04811686ef260c7cc
- SHA1 47cf529da3eabf5298ce8a22647470391ab0870a
- SHA512 e13a19c73784083d59ef2a0a68d8b11551761000f5cd5633379c00fa37efda12a9b756d122e5a81d5e739e1faf59f52f6fcf54529542281d7b2be571ad1e1d23
- SSDEEP 3072:BVk0ZXKS3rMorXHuyWXsOO2nYwcF1jUXvtGnuJHmKM6VTK9XxYXLG3KOMh3ClfwZ:BV7z3pjOVX3OZTEQBQTK9x/3iSptzwVn
- TLSH
  T1196406D0618404DADAABC680EC325A9A33B72DF1470F1A8B1F5CF5E4B78119DD7ED826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  unc.exe
- Size 753KB
- SHA256 30694a0101abfeea642cb9de7fb7eb66789eea74d8d7257b39822d7dab59445d
- MD5 c1317f7281ff9d56daeb7fae01acbdbf
- SHA1 3ede36c1d7afdbdba58f2e7a69e679ea85d1bec2
- SHA512 8e80b5a77112e85fc778f4ccdc7a2097a0b4905c0ba149b0475d9049a8cb150603f50acbf8150c3579c301c7a3c5470cb5dd9ae8c4eb9a3453ce2abccd8b700f
- SSDEEP 12288:0Ixb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroLkLwqG:llRcIOXrh7dEiTWZC8gXTFD
- TLSH
  T141F49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6