Analysis
- user interaction
yes - max time kernel
78s - max time network
78s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 16:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Roblox external.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roblox external.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Roblox external.exe
- Size 1.0MB
- Sample260809-tfn56stygs
- SHA256 6302a416073db442368578ebc03ba423ca79bd92d19adfbde38a6ac783fa8765
- MD5 3b1e66fdf7f83a2d2b6e47fb7ab322a9
- SHA1 4454e5ec21e07e91e8ca292edb2356afe7c9b8d5
- SHA512 e966b5ed8a099e66c47c0acf54eaa7a94685202f52c13cdabdf1312f8cd7b4f287539946bce1312958a66935ade27397433d3452b37c4908413e8ef20b1cdcdb
- SSDEEP 6144:Z87pK/sFXJYCcBGMpLnhYTYLYDa6+KGHTwJp2tW5r0XoZxy:Z87A/SXVeIZ4tW0Xo
- TLSH T1E0355467A6A66594C17BC038D542951AFD6034AA833C62FFB6C58EC12B907F8EF3C741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Roblox external.exe"C:\Users\Admin\AppData\Local\Temp\Roblox external.exe"1⤵PID:3672
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5584
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5852