General

  • Target
    https://cdn.discordapp.com/attachments/1518848409463947335/1518848692981989509/roblox.zip?ex=6a3b6993&is=6a3a1813&hm=103fb29f995a96e887625dd36e6533b03ffaeb93f365c811c906657950c0c8ec&
  • Sample260623-rntdradv5r
Score
8/10

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1518848409463947335/1518848692981989509/roblox.zip?ex=6a3b6993&is=6a3a1813&hm=103fb29f995a96e887625dd36e6533b03ffaeb93f365c811c906657950c0c8ec&
    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks