12fb9cffd55a3f182811d24901e577b1b8b8d67640c0c5368bdf35de99629728

Resubmissions

30/09/2026, 10:06

260930-l4869aws2q10

30/09/2026, 00:37

260930-ay1r5sysby10

Sharing

Copy URL Twitter E-mail

General

Target
RobloxFree.rar
Size 1.0MB
Sample260930-ay1r5sysby
SHA256 12fb9cffd55a3f182811d24901e577b1b8b8d67640c0c5368bdf35de99629728
MD5 669f917e539c0c3bf233bc1f904d4ad4
SHA1 47267464826db25949e8de04320bd74923d551ea
SHA512 245d1f8030eac86352921faa59c5e27b2cbf158e4bc8213e36ad794cbb041b27160d42b08d6c3406da8d20c8babec9fcf85acf461f5224829b0a894d1628f730
SSDEEP 24576:RCwwbD5R2xQClOc2Pad9uMvM2OPcyIiVSRH/KgbeZmsvul23I:MwklRAQ0Z2P49uuM2OPcyvE93Fse23I
TLSH
T13725333B9F624873CE7B423E5B4AC763876A73A9461E061B47412014F0BC7AB51F7E92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  RobloxFree/RPGRobloxExt.exe
- Size 1.5MB
- SHA256 d33a81e5b1c9f133d34b130df9681a3660b0a14c2237446044691d4bbab724be
- MD5 abbe13fe1fc88f1abd2136aba92d003e
- SHA1 d812e703fa348191452fda7f3ca593859605decf
- SHA512 110d597c07db95773e36b2e4869bcb608e633f5253d7c0019de7b4202d089b282881049fc210ad564186cfe808ca5231565635a66069764e5880b094586e1e27
- SSDEEP 24576:NhgadT9ORy7PW+8Za6t6UVHediZvYANErnk7WCxYZHSkh0edVjt0L0z+k7x2J:Dg+j7uW6gcrtYACnQY5needoL0z+kW
- TLSH
  T1E665E045B2F810FDD02BD135D986A60BEA72381817304DEB53E159992FB37E09BBB712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion privilege_escalation
- Suspicious use of NtCreateUserProcessOtherParentProcess
  defense_evasion privilege_escalation
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral10 behavioral11 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

T1134

Parent PID Spoofing

T1134.004

Defense Evasion

Access Token Manipulation

T1134

Parent PID Spoofing

T1134.004

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of NtCreateUserProcessOtherParentProcess

Executes dropped EXE

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11