General
- Target loaderrobloxskid2.exe
- Size 721KB
- Sample260723-bc434sbr21
- SHA256 b040c8b8d9e80f636ba74600c15bf560bec75b6b004987147bbd44a3d900a827
- MD5 79b2513acf605457514adc39a16d3f7c
- SHA1 a9a932136ca94e8f0ad80316cf9ebe23dece788d
- SHA512 294b93bcf70570a104c30f63c1e24ae9d81dff6628d8c27eb19fae38393eb938fa341717e6b218ddca124d966ee325968a8ba02b5573cea4d9fb9c70c42d31ff
- SSDEEP 12288:o5RClfkw5lOMX6GsDHpn/i+nisuMy23ocFHSJdtqUxCj2AqeMQmzFTSpkP2NnnrC:o5RC/LHCHp/risU23ocFqtquGKFzFTSk
- TLSH T1DFF4CF0AF3B192B9C127D574C962E617FB317C056B2086CB73D41899AFF75A08EAF211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loaderrobloxskid2.exe
Resource
win11-20260513-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target loaderrobloxskid2.exe
- Size 721KB
- SHA256 b040c8b8d9e80f636ba74600c15bf560bec75b6b004987147bbd44a3d900a827
- MD5 79b2513acf605457514adc39a16d3f7c
- SHA1 a9a932136ca94e8f0ad80316cf9ebe23dece788d
- SHA512 294b93bcf70570a104c30f63c1e24ae9d81dff6628d8c27eb19fae38393eb938fa341717e6b218ddca124d966ee325968a8ba02b5573cea4d9fb9c70c42d31ff
- SSDEEP 12288:o5RClfkw5lOMX6GsDHpn/i+nisuMy23ocFHSJdtqUxCj2AqeMQmzFTSpkP2NnnrC:o5RC/LHCHp/risU23ocFqtquGKFzFTSk
- TLSH T1DFF4CF0AF3B192B9C127D574C962E617FB317C056B2086CB73D41899AFF75A08EAF211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger