Analysis
- geolocation tags
- user interaction
yes - max time kernel
7s - max time network
16s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
09/07/2026, 16:59
General
- Target RobloxPlayerBeta.dll
- Size 21.0MB
- Sample260709-vhrvhsd14m
- SHA256 8de528761da86f52ac2d5ec42c30f5f6cc95895872a2576dacba58f7f96d5037
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RobloxPlayerBeta.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/544-0-0x000001A2559D0000-0x000001A2559D1000-memory.dmp