Analysis
- max time kernel
149s - max time network
166s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
27/10/2026, 16:14
General
- Target RobloxPlayerBeta.exe
- Size 138.7MB
- Sample261027-tprbwsvxet
- SHA256 b0f5f11a15a22545d7b15e2c4bae24f7ba153f834ad64fd3a148b48a262e94d4
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RobloxPlayerBeta.exe"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerBeta.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Flow-Module.dll
memory/4416-16-0x00007FF67F7F0000-0x00007FF6807F0000-memory.dmp
memory/4416-127-0x00007FF67F7F0000-0x00007FF6807F0000-memory.dmp