General

  • Target
    Roblox-Client-Tracker.zip
  • Size 3.5MB
  • Sample260624-w26nfsew21
  • SHA256 e0f43e3074c9f695190c457dd978d6b703b35256d2562c164f32e5559bfeed1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Roblox-Client-Tracker.zip
    .zip 3.5MB
  • .gitattributes
    194B
  • API-Dump.json
    6.6MB
  • API-Dump.txt
    917KB
  • CppTree.txt
    4.0MB
  • DeepStrings.txt
    2.0MB
  • FVariables.txt
    683KB
  • LuaPackages/Packages/_Index/ApolloClient/ApolloClient/README.md
    489B
  • LuaPackages/Packages/_Index/ApolloClient/ApolloClient/rotriever.toml
    1KB
  • LuaPackages/Packages/_Index/ApolloClient/lock.toml
    518B
  • LuaPackages/Packages/_Index/AvatarExperienceDeps/lock.toml
    211B
  • LuaPackages/Packages/_Index/Boolean/lock.toml
    174B
  • LuaPackages/Packages/_Index/BuilderIcons/BuilderIcons/BuilderIcons.json
    474B
  • LuaPackages/Packages/_Index/BuilderIcons/BuilderIcons/README.md
    913B
  • LuaPackages/Packages/_Index/BuilderIcons/BuilderIcons/mini/BuilderIcons.json
    374B
  • LuaPackages/Packages/_Index/BuilderIcons/BuilderIcons/rotriever.toml
    721B
  • LuaPackages/Packages/_Index/BuilderIcons/lock.toml
    132B
  • LuaPackages/Packages/_Index/Collections/lock.toml
    233B
  • LuaPackages/Packages/_Index/CollisionMatchers2D/lock.toml
    138B
  • LuaPackages/Packages/_Index/Console/lock.toml
    184B
  • LuaPackages/Packages/_Index/Cryo/Cryo/rotriever.toml
    155B
  • LuaPackages/Packages/_Index/Cryo/lock.toml
    123B
  • LuaPackages/Packages/_Index/Dash/Dash/README.md
    1KB
  • LuaPackages/Packages/_Index/Dash/Dash/rotriever.toml
    573B
  • LuaPackages/Packages/_Index/Dash/lock.toml
    123B
  • LuaPackages/Packages/_Index/DataLoader/lock.toml
    244B
  • LuaPackages/Packages/_Index/ES7Types/lock.toml
    127B
  • LuaPackages/Packages/_Index/EmojiList/EmojiList/README.md
    865B
  • LuaPackages/Packages/_Index/EmojiList/EmojiList/rotriever.toml
    93B
  • LuaPackages/Packages/_Index/EmojiList/lock.toml
    128B
  • LuaPackages/Packages/_Index/EventPropagation/EventPropagation/README.md
    321B
  • LuaPackages/Packages/_Index/EventPropagation/EventPropagation/rotriever.toml
    454B
  • LuaPackages/Packages/_Index/EventPropagation/lock.toml
    211B
  • LuaPackages/Packages/_Index/FocusBehaviors/FocusBehaviors/README.md
    450B
  • LuaPackages/Packages/_Index/FocusBehaviors/FocusBehaviors/rotriever.toml
    1KB
  • LuaPackages/Packages/_Index/FocusBehaviors/lock.toml
    199B
  • LuaPackages/Packages/_Index/FocusNavigation/FocusNavigation/README.md
    251B
  • LuaPackages/Packages/_Index/FocusNavigation/FocusNavigation/rotriever.toml
    709B
  • LuaPackages/Packages/_Index/FocusNavigation/lock.toml
    323B
  • LuaPackages/Packages/_Index/FocusNavigationUtils/FocusNavigationUtils/README.md
    1KB
  • LuaPackages/Packages/_Index/FocusNavigationUtils/FocusNavigationUtils/rotriever.toml
    277B
  • LuaPackages/Packages/_Index/FocusNavigationUtils/lock.toml
    139B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Accordion/Accordion.code.md
    .js 3KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Avatar/Avatar.code.md
    524B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/AvatarGroup/AvatarGroup.code.md
    563B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Badge/Badge.code.md
    1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Button/Button.code.md
    .js 1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/ButtonGroup/ButtonGroup.code.md
    .js 3KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Checkbox/Checkbox.code.md
    .js 737B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Chip/Chip.code.md
    .js 1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Coachmark/Coachmark.code.md
    .js 3KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/ColorPicker/ColorPicker.code.md
    .js 2KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/DateTimePicker/DateTimePicker.code.md
    1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Dialog/Dialog.code.md
    .js 5KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Divider/Divider.code.md
    1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Dropdown/Dropdown.code.md
    .js 836B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/EducationalTooltip/EducationalTooltip.code.md
    .js 4KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Empty/Empty.code.md
    433B
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/FeedbackAlert/FeedbackAlert.code.md
    .js 1KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Grid/Grid.code.md
    12KB
  • LuaPackages/Packages/_Index/Foundation/Foundation/Components/Icon/Icon.code.md
    1KB
  • MpDlpService.exe
    .exe 683KB
  • README.md
    3KB
  • SETTINGS_REPOSITORY.json
    1KB
  • mpclient.dll
    .dll 3.7MB

Roblox-Client-Tracker.zip

  • SHA256 e0f43e3074c9f695190c457dd978d6b703b35256d2562c164f32e5559bfeed1d
  • MD5 SHA1 SHA512 SSDEEP TLSH