17e83edde99f3a79636aeb34db1647309592e8563c9ec415bcc72ea658475a53 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

1772559771...ox.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
1772559771510_roblox.exe
Size 10.0MB
Sample260529-rfk3eaet3l
SHA256 17e83edde99f3a79636aeb34db1647309592e8563c9ec415bcc72ea658475a53
MD5 6e42862121298de78520414924ee1cf3
SHA1 c01ead453ad095c8cb4466c03d47422be6370c3a
SHA512 5af4138bee6657c7d38819dc5c873075113a5f896af7201fe876db39f884e736b3e307e031f873fb8df570ae39e900e20fa2b495c35f3e187f25b5579c9ca1d4
SSDEEP 196608:ohNQ90W8UA5uaurH0D9BKG+5fc2S/ErXKEtw+GADzgDv9ILvo5EPMsqfTmm:GNlW8oauQDvV+53SM8+GADU5IL6EkDn
TLSH
T15EB633843B8008E8E85DA23AC79C8D6253B17D32C6ADCA771BE47F510D772E9AD31761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence privilege_escalation pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1772559771510_roblox.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion persistence privilege_escalation

Malware Config

Targets

- Target
  1772559771510_roblox.exe
- Size 10.0MB
- SHA256 17e83edde99f3a79636aeb34db1647309592e8563c9ec415bcc72ea658475a53
- MD5 6e42862121298de78520414924ee1cf3
- SHA1 c01ead453ad095c8cb4466c03d47422be6370c3a
- SHA512 5af4138bee6657c7d38819dc5c873075113a5f896af7201fe876db39f884e736b3e307e031f873fb8df570ae39e900e20fa2b495c35f3e187f25b5579c9ca1d4
- SSDEEP 196608:ohNQ90W8UA5uaurH0D9BKG+5fc2S/ErXKEtw+GADzgDv9ILvo5EPMsqfTmm:GNlW8oauQDvV+53SM8+GADU5IL6EkDn
- TLSH
  T15EB633843B8008E8E85DA23AC79C8D6253B17D32C6ADCA771BE47F510D772E9AD31761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence privilege_escalation
- Drops file in Drivers directory
- Modifies Windows Firewall
  defense_evasion
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy