General
- Target RolaroPlayerLauncher.exe
- Size 1.9MB
- Sample260716-jsvhlsfz3l
- SHA256 6b7452746674683e4659ffa2708ae1802071b71a6d95ccbeca81198864044a88
- MD5 6532f2e38f60deca30502d65967d3b6b
- SHA1 c6839621003026361b12d88f67dc20e49e1fbc1c
- SHA512 eb16ce69592a981f44fd0df04bcc0276d690bc48e0caa5482787d85866b2c9f7309086b65e28669ea9af574fa3954eb8545975459143614d8b63111d4b734f08
- SSDEEP 49152:Vmpw5e0ToIsNTHOEEhGOYkXwRyA2C6nwx:Vn5e+ojNTHOEVOMyA4
- TLSH T1BD95BE43FB80D5BBC04B4271E02FE33DCB3796095B228BD3A75859B87DA53A01D166AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RolaroPlayerLauncher.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
RolaroPlayerLauncher.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target RolaroPlayerLauncher.exe
- Size 1.9MB
- SHA256 6b7452746674683e4659ffa2708ae1802071b71a6d95ccbeca81198864044a88
- MD5 6532f2e38f60deca30502d65967d3b6b
- SHA1 c6839621003026361b12d88f67dc20e49e1fbc1c
- SHA512 eb16ce69592a981f44fd0df04bcc0276d690bc48e0caa5482787d85866b2c9f7309086b65e28669ea9af574fa3954eb8545975459143614d8b63111d4b734f08
- SSDEEP 49152:Vmpw5e0ToIsNTHOEEhGOYkXwRyA2C6nwx:Vn5e+ojNTHOEVOMyA4
- TLSH T1BD95BE43FB80D5BBC04B4271E02FE33DCB3796095B228BD3A75859B87DA53A01D166AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL