General
- Target https://www.mediafire.com/file/5pmb17knugil93g/RobloxDowngrader.exe/file
- Sample260828-s2944ade52
Score
10/10
Malware Config
Targets
-
- Target https://www.mediafire.com/file/5pmb17knugil93g/RobloxDowngrader.exe/file
Score10/10-
Windows security bypass
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Windows security modification
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Impair Defenses
2Disable or Modify Tools
2Indicator Removal
1Clear Persistence
1Modify Registry
2