General
- Target ImageToStl.com_roblox-bacon-hair.zip
- Size 765KB
- Sample260601-sdp41sgv8y
- SHA256 49a83e2b8496fb1e0b38ab24a08bf3f51b5f10c2d552efbe3f8dd11fa70a853e
- MD5 187bcdd757f0d7df5440637452ecbcee
- SHA1 30987e99d2d1f285b29dd56c655602919361483c
- SHA512 163bfbd60b0130f157306dd02501d3e024cf3096645d479b4ad203206fb585c57ea3896dc5687e167390ed2c4c2db8e03c5667ed4dde9c2233803d31ef9a32d5
- SSDEEP 12288:wWpRDIsC35nPzHg085D3c9ZUsNKpNUKyj7iDRU1j9LcoiN4mBrRECrxyPjHWyE:JIsCd7t6cXDN6yHiWNSofmBrRRm2d
- TLSH T17AF43379F25B7CB9BEA0045449B59F6175608BF0BE0D8BE9926003377E3613C2FE1A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
roblox-bacon-hair.obj
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
roblox-bacon-hair.obj
Resource
win11-20260513-en
3 signatures
900 seconds
Malware Config
Targets
-
- Target roblox-bacon-hair.obj
- Size 346KB
- SHA256 f8996b26e635cc4363c8a9cbe5d88abb296fa1500d77522b818d8f08cd0f2df4
- MD5 4190e97e2e125fe1436cb7beb47ecd0a
- SHA1 ae5dfb8f5dd96abfa7a26bec7d9998e10aa75441
- SHA512 60110552247737548110f953f6a82ee688d5803ba94dc09abb7566926e0038cb267eb5f236dc8ca5bc439eeff2594f04f75275cb662b855323a604c64d3b2183
- SSDEEP 1536:XvXBb3+3skOl5oPweJ2Sh0BesSF9kAmwZoajo5ZTGywrIiXM3aWAnnwLd7MbazCJ:7ozB0Bep0dn3Z5a/d2zb9JgeLy
- TLSH T1767466F4FB9851E2FA4FE5B9C83A4BBC26431C376E92E58C4E918D60E1336C95F24449
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.