Resubmissions

04/06/2026, 19:52

260604-ylm8aadv3w8

04/06/2026, 19:46

260604-yhcmdadt3t7

General

  • Target
    Roblox_External.exe
  • Size 14.6MB
  • Sample260604-yhcmdadt3t
  • SHA256 f926fa387dfbe2cf3e9d08f50c034aa3d6a010d5f300e5aa627ac8b12ad6ac39
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Roblox_External.exe
    • Size 14.6MB
    • SHA256 f926fa387dfbe2cf3e9d08f50c034aa3d6a010d5f300e5aa627ac8b12ad6ac39
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Modifies system executable filetype association

MITRE ATT&CK Enterprise v16

Tasks