Overview

overview

7

Static

static

6

Payload/Ro...ts.pdf

windows10-2004-x64

3

Payload/Ro...ts.pdf

windows11-ltsc_2024-x64

3

Payload/Ro...dd.svg

windows10-2004-x64

3

Payload/Ro...dd.svg

windows11-ltsc_2024-x64

4

Payload/Ro...al.svg

windows10-2004-x64

3

Payload/Ro...al.svg

windows11-ltsc_2024-x64

4

Payload/Ro...al.svg

windows10-2004-x64

3

Payload/Ro...al.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Payload/Ro...nt.svg

windows10-2004-x64

3

Payload/Ro...nt.svg

windows11-ltsc_2024-x64

4

Payload/Ro...ck.svg

windows10-2004-x64

3

Payload/Ro...ck.svg

windows11-ltsc_2024-x64

4

Payload/Ro...nt.svg

windows10-2004-x64

3

Payload/Ro...nt.svg

windows11-ltsc_2024-x64

4

Payload/Ro...ie.svg

windows10-2004-x64

3

Payload/Ro...ie.svg

windows11-ltsc_2024-x64

4

Payload/Ro...le.svg

windows10-2004-x64

3

Payload/Ro...le.svg

windows11-ltsc_2024-x64

4

Payload/Ro...Id.svg

windows10-2004-x64

3

Payload/Ro...Id.svg

windows11-ltsc_2024-x64

4

Payload/Ro...rt.svg

windows10-2004-x64

3

Payload/Ro...rt.svg

windows11-ltsc_2024-x64

4

Payload/Ro...rd.svg

windows10-2004-x64

3

Payload/Ro...rd.svg

windows11-ltsc_2024-x64

4

Payload/Ro...Id.svg

windows10-2004-x64

3

Payload/Ro...Id.svg

windows11-ltsc_2024-x64

4

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

7

Payload/Ro...on.svg

windows10-2004-x64

3

Payload/Ro...on.svg

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Delta-2.717.982.ipa
  • Size 231.6MB
  • Sample260711-b9xejacx3v
  • SHA256 cb15b2196128d7d410e922e9f0404740a68e45be11c0133397463cd9e370375d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryevasionpdfspyware

Malware Config

Targets

    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/Assets.car
    • Size 254KB
    • SHA256 45ffd37a101f7a5594fcc1651db1f3c696c3477d16967d220a821c7861ef549c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral1behavioral2
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/add.svg
    • Size 1KB
    • SHA256 e016da042634e26ae076adec3796f9ddbe422bc1d4890b0f88b99b45de37b733
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral3behavioral4
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/barcodeCaptureTipsModal.svg
    • Size 6KB
    • SHA256 66168a99b294a6c55e297318a799b9cbb81480160ce6c55579941c305c8bb641
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/captureTipsModal.svg
    • Size 2KB
    • SHA256 5efddfc1d3c773cbff791c82a1b6e6fc75b30a3dad4c87942df261bdb8fbe5be
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral7behavioral8
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/createPersonaCTACardIcon.svg
    • Size 1KB
    • SHA256 22d05b10956c135a6609c00149c60e57371641b34f9f07aac711a374b256647b
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/failureDocument.svg
    • Size 1KB
    • SHA256 8e4408b51f213f785a1e824f6e92e1558c6609a5c20193b9fd5fe11a1d214a31
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral11behavioral12
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/failureIdBack.svg
    • Size 27KB
    • SHA256 c0b56eb2dd3c9d5fa2c6f40f491f9b0fbb5b1e0dfa321dd6a257a7c29abe2a8f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral13behavioral14
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/failureIdFront.svg
    • Size 5KB
    • SHA256 bbb4c1dd537b7b6a85a2557e0e7fed0ae38b355117d3b59c3271acf3b6b81d87
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral15behavioral16
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/failureSelfie.svg
    • Size 3KB
    • SHA256 8fed19f74224284afa18cf941089b0fcb9b7f3d780e178baa948adcc631a5923
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral17behavioral18
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconExclamationErrorCircle.svg
    • Size 1KB
    • SHA256 57aeae2fd1eb804ecc4740358392f8313d11966e12dcc9d138f7b280077afb64
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral19behavioral20
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconId.svg
    • Size 967B
    • SHA256 8c9a9b3345161cb5eda09d57c96ac312b523945d2bbb27a87f865750f1860a9c
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral21behavioral22
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconPassport.svg
    • Size 976B
    • SHA256 c5cef0baa8ad71aa4c07506c694b5af84cb3390df7c9c71b992c1c85323554c2
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral23behavioral24
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconResidenceCard.svg
    • Size 734B
    • SHA256 b20878ee81765e0c1f59f44976332236d2e7b08500ab2c31a5568af70f651541
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral25behavioral26
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/iconStateId.svg
    • Size 812B
    • SHA256 43207c9bf1a244006932658dcf684259d56c42c8ae26a609b02243a51cdfe9cc
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral27behavioral28
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionCheckIcon.svg
    • Size 317B
    • SHA256 b52fb41acb14e2720d230c910c996e3e8f53b025f7a3c3240179e2fa30a23cec
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    adwarediscoveryspyware

    • Loads dropped DLL

    behavioral29behavioral30
    • Target
      Payload/Roblox.app/Frameworks/Persona2.framework/optionChevronIcon.svg
    • Size 524B
    • SHA256 0edc523152a311a6553663df8902f08ceb40e4e02cfc5674f9f68c8a91a14f1d
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasion
Score
6/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
4/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
4/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
4/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
4/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
4/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoveryspyware
Score
4/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
4/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoveryspyware
Score
4/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
4/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
4/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
4/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
4/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
4/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
7/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10