General

  • Target
    FilteringDisabled.rar
  • Size 724.5MB
  • Sample260722-1bmvwace73
  • SHA256 ebca93a706338a22bbf90b208dd2aaf0fb49118f579f5cbc904c55d6c5771807
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Clients/2014M/content/fonts/characterCameraScript.rbxmx
    • Size 117KB
    • SHA256 10a724df82261add3dd3d28b7c9a5942717e802133e8f6d5b652dbe0e77727a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/content/fonts/characterControlScript.rbxmx
    • Size 53KB
    • SHA256 1eddfb974307fc600cffa6168a71cc38f7ee2d075ffc30ca251bcbba3acecde6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/content/fonts/humanoidAnimateR15.rbxm
    • Size 19KB
    • SHA256 c947545c6fcb75be32ac0d3b7786b97c5e713f337b4dd4f37e909dd8927ef688
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/content/host.txt
    • Size 10KB
    • SHA256 e24b1cf9d8631777be5682ac60626732212c832c37af8597245b7aadde108dcb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/msvcp110.dll
    • Size 522KB
    • SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/msvcr110.dll
    • Size 854KB
    • SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/tbb.dll
    • Size 271KB
    • SHA256 489417408927123edcdb6490939223ec2fc8f7576cd28e818fe86043ff8c9393
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2014M/tbb_debug.dll
    • Size 764KB
    • SHA256 ba81849ceff9f60dc4285682bae17851c85fcaa2f27f180814c343cde933b833
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2018E/Player/RobloxPlayerBeta.exe
    • Size 19.4MB
    • SHA256 147eb237a3d2c675982750ae5622042eb60836dcbf175ca57faf8fae14a0ab28
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Target
      Clients/2018E/Player/RobloxPlayerBeta.exe.bak
    • Size 19.4MB
    • SHA256 97cfb11f8d9cccb9f0036fafafb193ab02e163f7d26c219ffa307b162713a7cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Target
      Clients/2018E/Player/fmod.dll
    • Size 1.4MB
    • SHA256 f766df180452c176d650bd0f539e7a09dcbdb324c44a587861f5f05f106c184a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Clients/2018L/Player/RobloxPlayerBeta.exe
    • Size 33.0MB
    • SHA256 6511978d51bf179a74cb868048c91b61ac4652464dc73b7fe8fd6fa9bd6fa817
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Target
      Clients/2018M/Player/RobloxPlayerBeta.exe
    • Size 28.5MB
    • SHA256 bc7e0d20819a225992d73244dbb33a3db2e27d5e5d40044fc96075d66409aa61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Target
      Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Action.lua
    • Size 1KB
    • SHA256 f7d54d79ddc9e8718e6233c79b95660e9326c2bab8acac48ea96f44aef23838b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Immutable.lua
    • Size 2KB
    • SHA256 9a252ac8637c2451b71f0f5a6f6c1fb64b8e23276b582582823626ed2055223d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Signal.lua
    • Size 1KB
    • SHA256 81f589731a92fe4c326669ce6a43881d82cbffeec325e67d30b9dc5bbe21da9c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

upxvmprotect
Score
7/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
6/10

behavioral18

discovery
Score
6/10

behavioral19

discovery
Score
6/10

behavioral20

discovery
Score
6/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
6/10

behavioral24

discovery
Score
6/10

behavioral25

discovery
Score
6/10

behavioral26

discovery
Score
6/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10