General
- Target RobloxCrashHandler.exe
- Size 3.3MB
- Sample260519-rt7tbsht7m
- SHA256 9f824b55f89af8136ea2d0675437dae95cdc1bc649832f2ab0b0f61ea3ccf42d
Score
9/10
Malware Config
Targets
-
- Target RobloxCrashHandler.exe
- Size 3.3MB
- SHA256 9f824b55f89af8136ea2d0675437dae95cdc1bc649832f2ab0b0f61ea3ccf42d
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.