General
- Target Reconnect-MultiRoblox-1.1.23.exe
- Size 6.2MB
- Sample260729-jl68tsfa73
- SHA256 2491457e8669158f3a25df90d31ad3c50dbd8aa1959104f271f8f6768701b645
- MD5 61bfa69d4f8c2602df75ab4584a3a6a1
- SHA1 604069f7efee994e042435687bd17789323b1cca
- SHA512 c8d303891884070a95317780040e9ea23aa447a44e950ff966564b50e9107b8cf109b3e16e54debefdf83d797787bc291683f9060a4d0ff607cb7ce70daf28c0
- SSDEEP 98304:cLM+2CEJFhIFw4/lNs5Oei2PTxpAWc0a6XugLdXm+2hvY/+eixh+Z9pkyjIn+g4t:x+GjIwlpDFlmA/VixkZHkquF4
- TLSH T12A66BE07E29081E9C09EC078C35BAA37EB72B8C94535B29F5BE44B112F2AF506F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Reconnect-MultiRoblox-1.1.23.exe
Resource
win10ltsc2021-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
Reconnect-MultiRoblox-1.1.23.exe
Resource
win11-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral3
Sample
Reconnect-MultiRoblox-1.1.23.exe
Resource
win11ltsc2024-20260709-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target Reconnect-MultiRoblox-1.1.23.exe
- Size 6.2MB
- SHA256 2491457e8669158f3a25df90d31ad3c50dbd8aa1959104f271f8f6768701b645
- MD5 61bfa69d4f8c2602df75ab4584a3a6a1
- SHA1 604069f7efee994e042435687bd17789323b1cca
- SHA512 c8d303891884070a95317780040e9ea23aa447a44e950ff966564b50e9107b8cf109b3e16e54debefdf83d797787bc291683f9060a4d0ff607cb7ce70daf28c0
- SSDEEP 98304:cLM+2CEJFhIFw4/lNs5Oei2PTxpAWc0a6XugLdXm+2hvY/+eixh+Z9pkyjIn+g4t:x+GjIwlpDFlmA/VixkZHkquF4
- TLSH T12A66BE07E29081E9C09EC078C35BAA37EB72B8C94535B29F5BE44B112F2AF506F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.