General
- Target MultiRoblox.exe
- Size 7.7MB
- Sample260717-mesnmsgz8q
- SHA256 e663bb178c801d33d159f4d681cfe9da3a3ee1043bad29e6a0e8705b8303d9bb
- MD5 5569a4670429d3640f62a82c5511b380
- SHA1 2c532f09736b46c966b0a880fde48e5fea43ca91
- SHA512 2fb58698cd9382de6f3a2eba8a1d58f93098b4818428ec9b4a80100ca28700063015eeb78c1a71885e979e53078996e6c411456b58ee14a69f8bc90a111e382e
- SSDEEP 98304:0ogDJoCmNpy4akZZH81Q2LKxK7tIE1rDdmp1On+0:01GCmN37Hc/Dcp10
- TLSH T13C864A03F6A281E8C0AEC474835AA733E772B8CD493472EB5BA45B212F56F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MultiRoblox.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
MultiRoblox.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target MultiRoblox.exe
- Size 7.7MB
- SHA256 e663bb178c801d33d159f4d681cfe9da3a3ee1043bad29e6a0e8705b8303d9bb
- MD5 5569a4670429d3640f62a82c5511b380
- SHA1 2c532f09736b46c966b0a880fde48e5fea43ca91
- SHA512 2fb58698cd9382de6f3a2eba8a1d58f93098b4818428ec9b4a80100ca28700063015eeb78c1a71885e979e53078996e6c411456b58ee14a69f8bc90a111e382e
- SSDEEP 98304:0ogDJoCmNpy4akZZH81Q2LKxK7tIE1rDdmp1On+0:01GCmN37Hc/Dcp10
- TLSH T13C864A03F6A281E8C0AEC474835AA733E772B8CD493472EB5BA45B212F56F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates processes with tasklist