General
- Target WINDOWS_FigmaToRobloxProxy.exe
- Size 8.0MB
- Sample260622-2qc5nagy6l
- SHA256 59ab47e426e36c62a4117ddcf5b8a89aa3c82eeafcb55ced9067ab66a407cd30
- MD5 8d2e4864b634f4fae1fd229daf9a364f
- SHA1 c14d77e1697f4ecc23453db1885c25fddd13fefd
- SHA512 1ff7f96b86042e378f89bd7c1b50fcf776818cedf14e89300852429fdbbc9b57c57d43cfbb780dae091e7f6dd92684381241add4f7b683f0ab7b88e0d009a812
- SSDEEP 98304:lDY0Reo0P32TP1uXtpxir3wEYu1d3GR8NRSuaPpN08fyLZeK:lEo0PMP1I32FvEmwpN0s
- TLSH T1D0868D03EC9159E9C1AAE23189A79253BB317C485B3223D72B50F3392E77BD45EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WINDOWS_FigmaToRobloxProxy.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
WINDOWS_FigmaToRobloxProxy.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target WINDOWS_FigmaToRobloxProxy.exe
- Size 8.0MB
- SHA256 59ab47e426e36c62a4117ddcf5b8a89aa3c82eeafcb55ced9067ab66a407cd30
- MD5 8d2e4864b634f4fae1fd229daf9a364f
- SHA1 c14d77e1697f4ecc23453db1885c25fddd13fefd
- SHA512 1ff7f96b86042e378f89bd7c1b50fcf776818cedf14e89300852429fdbbc9b57c57d43cfbb780dae091e7f6dd92684381241add4f7b683f0ab7b88e0d009a812
- SSDEEP 98304:lDY0Reo0P32TP1uXtpxir3wEYu1d3GR8NRSuaPpN08fyLZeK:lEo0PMP1I32FvEmwpN0s
- TLSH T1D0868D03EC9159E9C1AAE23189A79253BB317C485B3223D72B50F3392E77BD45EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.