Overview

overview

6

Static

static

6

Payload/Ro...ts.pdf

windows10-2004-x64

3

Payload/Ro...ts.pdf

windows11-ltsc_2024-x64

3

Payload/Ro...dd.svg

windows10-2004-x64

3

Payload/Ro...dd.svg

windows11-ltsc_2024-x64

4

Payload/Ro...al.svg

windows10-2004-x64

3

Payload/Ro...al.svg

windows11-ltsc_2024-x64

4

Payload/Ro...al.svg

windows10-2004-x64

3

Payload/Ro...al.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...le.svg

windows10-2004-x64

3

Payload/Ro...le.svg

windows11-ltsc_2024-x64

4

Payload/Ro...Id.svg

windows10-2004-x64

3

Payload/Ro...Id.svg

windows11-ltsc_2024-x64

4

Payload/Ro...rt.svg

windows10-2004-x64

3

Payload/Ro...rt.svg

windows11-ltsc_2024-x64

4

Payload/Ro...rd.svg

windows10-2004-x64

3

Payload/Ro...rd.svg

windows11-ltsc_2024-x64

4

Payload/Ro...Id.svg

windows10-2004-x64

3

Payload/Ro...Id.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...ve.svg

windows10-2004-x64

3

Payload/Ro...ve.svg

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Delta-2.727.1199.ipa
  • Size 123.2MB
  • Sample260705-d7w24ahs3v
  • SHA256 e5c897afa2c601da012c2da254b45a2630a31db2db225cd8e01a9acf468c0bff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoveryevasionpdfspyware

Malware Config

Targets

    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/Assets.car
    • Size 319KB
    • SHA256 4547cfb9d3445054b307f6f0085830b39556c9b98906f266e24d537d4ee50548
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral1behavioral2
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/add.svg
    • Size 1KB
    • SHA256 e016da042634e26ae076adec3796f9ddbe422bc1d4890b0f88b99b45de37b733
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral3behavioral4
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/barcodeCaptureTipsModal.svg
    • Size 6KB
    • SHA256 66168a99b294a6c55e297318a799b9cbb81480160ce6c55579941c305c8bb641
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/captureTipsModal.svg
    • Size 2KB
    • SHA256 5efddfc1d3c773cbff791c82a1b6e6fc75b30a3dad4c87942df261bdb8fbe5be
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral7behavioral8
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/createPersonaCTACardIcon.svg
    • Size 1KB
    • SHA256 22d05b10956c135a6609c00149c60e57371641b34f9f07aac711a374b256647b
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconExclamationErrorCircle.svg
    • Size 1KB
    • SHA256 57aeae2fd1eb804ecc4740358392f8313d11966e12dcc9d138f7b280077afb64
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral11behavioral12
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconId.svg
    • Size 967B
    • SHA256 8c9a9b3345161cb5eda09d57c96ac312b523945d2bbb27a87f865750f1860a9c
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral13behavioral14
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconPassport.svg
    • Size 976B
    • SHA256 c5cef0baa8ad71aa4c07506c694b5af84cb3390df7c9c71b992c1c85323554c2
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral15behavioral16
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconResidenceCard.svg
    • Size 734B
    • SHA256 b20878ee81765e0c1f59f44976332236d2e7b08500ab2c31a5568af70f651541
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral17behavioral18
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconStateId.svg
    • Size 812B
    • SHA256 43207c9bf1a244006932658dcf684259d56c42c8ae26a609b02243a51cdfe9cc
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral19behavioral20
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionCheckIcon.svg
    • Size 317B
    • SHA256 b52fb41acb14e2720d230c910c996e3e8f53b025f7a3c3240179e2fa30a23cec
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral21behavioral22
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionChevronIcon.svg
    • Size 524B
    • SHA256 0edc523152a311a6553663df8902f08ceb40e4e02cfc5674f9f68c8a91a14f1d
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral23behavioral24
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionFlagIcon.svg
    • Size 712B
    • SHA256 1d269ed46120bf4540ccabfa67a47d97e93a6ab0b8e2b835d24e792ba05e35f8
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral25behavioral26
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionGlobeIcon.svg
    • Size 878B
    • SHA256 d263dcf4a1183166d6dea962d97054ab54ea805c951f1591eb38f4d2edcaf485
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral27behavioral28
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionHomeIcon.svg
    • Size 634B
    • SHA256 0aad0c1f0c4d517f4d75f8dc6346723dbbe1d8c1376001aaed3cda0e9b9c7173
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral29behavioral30
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/remove.svg
    • Size 1KB
    • SHA256 bf60ececf948bfdddb947725f38d412f5e1cb7cc263a2c578ecad1bf2f630137
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasion
Score
6/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
4/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
4/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
4/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
4/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
4/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoveryspyware
Score
4/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
4/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoveryspyware
Score
4/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
4/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
4/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
4/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
4/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
4/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
4/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10