General
- Target Roblox.exe
- Size 11.9MB
- Sample260908-e5kfys1hlh
- SHA256 21f5f5176e7f94c87426187b622fd10ea2161978bc1ff8f0b17f499d0bb305ac
- MD5 64d4957a421ce07a7553374abf9e5bc4
- SHA1 2387ee63783d043a26e3163026cc653b64ffb9ea
- SHA512 dcb0f6233ca8d0dc30cb7f954f3853d6d5fa1512fd1bb6e65977896c87eba0c74edac0c1777737ac6663438af415950a97878c471f3abe857585946c7feb1232
- SSDEEP 196608:v+5zOuQXEpXnH2ph1iut32LxSiLCw10+u41ZPcUbF3AajnB09vonr5ePT1KyDo0Z:G5xQXEAphVta510MjaajO9vUr5W5/
- TLSH T154C63368B75051FBF5F7803D8DE6D862B2E232011B52D2EF07A012652E7B6F06D3DA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Roblox.exe
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral2
Sample
Roblox.exe
Resource
win11ltsc2024-20260710-en
4 signatures
30 seconds
Behavioral task
behavioral3
Sample
Roblox.pyc
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral4
Sample
Roblox.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
30 seconds
Malware Config
Targets
-
- Target Roblox.exe
- Size 11.9MB
- SHA256 21f5f5176e7f94c87426187b622fd10ea2161978bc1ff8f0b17f499d0bb305ac
- MD5 64d4957a421ce07a7553374abf9e5bc4
- SHA1 2387ee63783d043a26e3163026cc653b64ffb9ea
- SHA512 dcb0f6233ca8d0dc30cb7f954f3853d6d5fa1512fd1bb6e65977896c87eba0c74edac0c1777737ac6663438af415950a97878c471f3abe857585946c7feb1232
- SSDEEP 196608:v+5zOuQXEpXnH2ph1iut32LxSiLCw10+u41ZPcUbF3AajnB09vonr5ePT1KyDo0Z:G5xQXEAphVta510MjaajO9vUr5W5/
- TLSH T154C63368B75051FBF5F7803D8DE6D862B2E232011B52D2EF07A012652E7B6F06D3DA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target Roblox.pyc
- Size 889B
- SHA256 e85dd5b03b1937516aaae5ae9671ab402cdbabe181b3777a6fe735a65010c067
- MD5 cf8f647bf7974c5b6129df72e0709b68
- SHA1 233bb2eca4c3578600a9c8148391bdd349bcd0e5
- SHA512 b09f6647deb4cc121659c7560b1fe054956bd9809fb31fbe025b3b21f90ca0c7181d080c93e881d6f4df7c30f93c09063f0f31b77e039bb3146eca3349efc62a
- TLSH T1B3117AE76D7041D8C64E443AE0A397D43540D9D9E5117057CF8111BEDECB37E151230B
- MD5 SHA1 SHA512 TLSH
Score3/10