General
- Target Roblox_External.exe
- Size 14.6MB
- Sample260604-yhcmdadt3t
- SHA256 f926fa387dfbe2cf3e9d08f50c034aa3d6a010d5f300e5aa627ac8b12ad6ac39
- MD5 d9267619a0cc142702ee05a40f102f66
- SHA1 2caa3b78844fb169c34fdeedd4941d828edc8be4
- SHA512 9cb32dbafe54646531a1262943be55328a60b67366967319b166b747d4c042edcbf4686b4a6e5752eab2f89125c0b47431e100d3581624e88302a67b96519d37
- SSDEEP 393216:J0u/flmNP6ly03E16+PQsMQMX8kT+olIDmonw6KySJHGBoXYobEkovI:JZqPQ68xIDf3SJHD+lI
- TLSH T197F6E10CA5B719ACDFB1D5F8592A2217F21678CC0BB45AE357C809E11E527EC1ABDF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Roblox_External.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roblox_External.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Roblox_External.exe
- Size 14.6MB
- SHA256 f926fa387dfbe2cf3e9d08f50c034aa3d6a010d5f300e5aa627ac8b12ad6ac39
- MD5 d9267619a0cc142702ee05a40f102f66
- SHA1 2caa3b78844fb169c34fdeedd4941d828edc8be4
- SHA512 9cb32dbafe54646531a1262943be55328a60b67366967319b166b747d4c042edcbf4686b4a6e5752eab2f89125c0b47431e100d3581624e88302a67b96519d37
- SSDEEP 393216:J0u/flmNP6ly03E16+PQsMQMX8kT+olIDmonw6KySJHGBoXYobEkovI:JZqPQ68xIDf3SJHD+lI
- TLSH T197F6E10CA5B719ACDFB1D5F8592A2217F21678CC0BB45AE357C809E11E527EC1ABDF02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1