General
- Target https://getblox-pc.net/?utm_source=direct&utm_medium=cpc&utm_campaign=roblox-wp4&utm_content=16485035614&utm_term=---autotargeting&etext=2202.KMUlYh_1Yq_xthSxOpsTGDYmFuovXeEZwCDC15slT7RpYmFuZ25saXFqd3J1ZGVx.74038bd98d4f36994bb9edcc07610faddce00c19&yclid=16300428672824770559&os=win10
- Sample260912-p7489axdrf
Score
8/10
Malware Config
Targets
-
- Target https://getblox-pc.net/?utm_source=direct&utm_medium=cpc&utm_campaign=roblox-wp4&utm_content=16485035614&utm_term=---autotargeting&etext=2202.KMUlYh_1Yq_xthSxOpsTGDYmFuovXeEZwCDC15slT7RpYmFuZ25saXFqd3J1ZGVx.74038bd98d4f36994bb9edcc07610faddce00c19&yclid=16300428672824770559&os=win10
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled