Overview

overview

8

Static

static

3

robloxinstaller.exe

windows10-2004-x64

7

robloxinstaller.exe

windows11-ltsc_2024-x64

8

Resubmissions

22/06/2026, 18:34

260622-w7tk3sfx718

22/06/2026, 18:04

260622-wnyqpaey2m10

03/04/2026, 19:32

260403-x83qtads9z8

12/01/2026, 20:25

260112-y7jf8adx2b7

13/11/2025, 19:43

251113-yfenysbl517

25/08/2025, 11:58

250825-n5eedawqz48

23/08/2025, 20:00

250823-yrfqdsypt67

23/08/2025, 19:54

250823-ym16jahm2t8

23/08/2025, 19:52

250823-ylj6mayny98

23/08/2025, 19:48

250823-yjes5aynw67

Sharing

Copy URL Twitter E-mail

General

  • Target
    robloxinstaller.exe
  • Size 7.9MB
  • Sample260622-w7tk3sfx71
  • SHA256 af65a4a08c365d476ea941add0d62058ccdaa544cf42509e05c78d9658a8005d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceransomwarespywaretrojan

Malware Config

Targets

    • Target
      robloxinstaller.exe
    • Size 7.9MB
    • SHA256 af65a4a08c365d476ea941add0d62058ccdaa544cf42509e05c78d9658a8005d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwaredefense_evasiondiscoveryspywaretrojanpersistenceransomware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks