General
- Target RobloxPlayerInstaller.exe
- Size 9.4MB
- Sample260507-e1vq5aey6s
- SHA256 53374359812a5156f9765bdf76830fc0dc2afe5545b7fe1f966fa54693deee27
- MD5 a5c29463ba57b77bf976ca59239737ca
- SHA1 2e2ece832beffd24078b23004c2de8d63ca81d7c
- SHA512 9f43c050e60959e27518275b57bb2b599c3b2a1e4bc9986740a06f73379afda6171f0dc472412296a00cc1211f09acf8d2fcadc300a113b6cb45e5af2a869fad
- SSDEEP 196608:/fYe3Rcu2TzqUrREheMAF80c31NfEHvB1C5NNPJ:/Ou2vl4I8H1NfEbCPNPJ
- TLSH T19CA6BE22F940C031E5C102B2E6BDAFB65E7C9E240B7954C767C459BC59305E33A3AB6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RobloxPlayerInstaller.exe
Resource
win10v2004-20250619-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
RobloxPlayerInstaller.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target RobloxPlayerInstaller.exe
- Size 9.4MB
- SHA256 53374359812a5156f9765bdf76830fc0dc2afe5545b7fe1f966fa54693deee27
- MD5 a5c29463ba57b77bf976ca59239737ca
- SHA1 2e2ece832beffd24078b23004c2de8d63ca81d7c
- SHA512 9f43c050e60959e27518275b57bb2b599c3b2a1e4bc9986740a06f73379afda6171f0dc472412296a00cc1211f09acf8d2fcadc300a113b6cb45e5af2a869fad
- SSDEEP 196608:/fYe3Rcu2TzqUrREheMAF80c31NfEHvB1C5NNPJ:/Ou2vl4I8H1NfEbCPNPJ
- TLSH T19CA6BE22F940C031E5C102B2E6BDAFB65E7C9E240B7954C767C459BC59305E33A3AB6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger