General
- Target free robux.exe
- Size 12KB
- Sample260930-gr3rgssfqg
- SHA256 95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4
- MD5 d267544e945f5d1c20c61274730f091b
- SHA1 c27646e56a87e32ef48aace0e6b2442a65f07e1e
- SHA512 0768fcd4fd3b1b9250f56afac1eeedb8728055d87eae7e11864f932829e859db3a5930278e2bae78aa6172e0b677e18c7f6c9af23bffa915d5db3cf22ecab245
- SSDEEP 192:/QF/gxRYojJXr3VPq82/fv3z/bZAVVS7R3Q5tfAxj0zGT:y/CYotXLVRuh3xj0
- TLSH T16F421947FB8548EBD66943BC82FB078AF0B1BE185B9213CB03A1E0551E4A7C5B6B15C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
free robux.exe
Resource
win10ltsc2021-20260911-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
free robux.exe
Resource
win11-20260911-en
16 signatures
600 seconds
Malware Config
Targets
-
- Target free robux.exe
- Size 12KB
- SHA256 95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4
- MD5 d267544e945f5d1c20c61274730f091b
- SHA1 c27646e56a87e32ef48aace0e6b2442a65f07e1e
- SHA512 0768fcd4fd3b1b9250f56afac1eeedb8728055d87eae7e11864f932829e859db3a5930278e2bae78aa6172e0b677e18c7f6c9af23bffa915d5db3cf22ecab245
- SSDEEP 192:/QF/gxRYojJXr3VPq82/fv3z/bZAVVS7R3Q5tfAxj0zGT:y/CYotXLVRuh3xj0
- TLSH T16F421947FB8548EBD66943BC82FB078AF0B1BE185B9213CB03A1E0551E4A7C5B6B15C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.