44d20a6ee715f90b3bcf77b14bf56f4c52cdd12c24b232d5cd06648f2f16885d

General

Target
roblox.zip
Size 65KB
Sample260913-pl1c6sbb58
SHA256 44d20a6ee715f90b3bcf77b14bf56f4c52cdd12c24b232d5cd06648f2f16885d
MD5 d74fcdb7ddc0b2360662a6289ecf0211
SHA1 94e16a951270a2f42299c7efb270b576c8b1b3e8
SHA512 7b1994adb1369e807d99f3e75abad2b589408028ea826e1a5c66cb3d885dd612cb0a111454f26422529393d8171e539387f04c8e6d48e478ea629f85efabd8f8
SSDEEP 1536:oEY9TRJ/Z/436pDG1CuFXBGRq2qeTMqoF7:LYTFE6pDUHG82qegqk7
TLSH
T1D363E073EBDE5F25F160977AE0784033D39612BE17CE6422AE45B8EC4E614C842EC28D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Roblox+/ClientSettings/ClientAppSettings.json
- Size 180KB
- SHA256 e5d98f1eceb047fb6fbf0c5b24b37cbd025618b62e5d06f7cae73f305f6cd1e9
- MD5 477d7ce790fdf2b75c818cce5f1e5573
- SHA1 038bddccc962e4a6a83791122d63a0b0d854aba3
- SHA512 52ea47c67215f7b307ce0b21f823c5027364e5ab5ef5c17aac743bacd2203f49586e4c970b8a5392bb6fd4cab0994f784efa0441602d5034569bb731d28d27aa
- SSDEEP 12:jBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBjBj5:P
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Roblox+/RobloxInstaller.exe.lnk
- Size 1KB
- SHA256 9fb84755a05c89b512993f5f27038270eb7315a75ea8d639f1e954e228634ca4
- MD5 9300712d6c5a586ad319b646c279c3bc
- SHA1 9cac047bc78760803f548935b4107d8ed4a5086c
- SHA512 0163b23a3f2d49597191d75cf8366a78568bb19e79a10a8deeec161035c015bca0e54ddcf85b0741580439ce745dd71e589fc676ba4db3084ed52f0ec559201a
- TLSH
  T15831FE237EBB8316FA770BB095B641C0F231BD507F65B85E800DA60965A6418D0B8F2B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Roblox+/Versions/version-xyz456/RobloxPlayer.bat
- Size 120B
- SHA256 082401ec69c5eabccb573a9cf972ac506b30697cbd6b6f56071b548899c6bd1d
- MD5 6945abcfdc487df59c40b4b93ed169c6
- SHA1 d025fadf2f9015e3cb78f2d12fd7b418aaf73bc2
- SHA512 b5319e452656702bc19d8ede331811268e2b45b41219696a944a971c78f2c928d152afb82e383afcfcfb5f6eecc6311a5109cbb7352316face69330e57b162c2
- TLSH
  T183B092E02A8740A824889866BA11AA0A3C6F862D3B28235840CD8C0F22A256866292C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6