Overview
overview
7Static
static
3RobloxPlay...4).exe
windows10-2004-x64
7RobloxPlay...4).exe
windows10-ltsc_2021-x64
7RobloxPlay...4).exe
windows11-21h2-x64
7RobloxPlay...4).exe
windows11-ltsc_2024-x64
7RobloxPlay...4).exe
android-10-x64
RobloxPlay...4).exe
android-11-x64
RobloxPlay...4).exe
android-13-x64
RobloxPlay...4).exe
android-14-x64
RobloxPlay...4).exe
android-15-x64
RobloxPlay...4).exe
android-9-x86
RobloxPlay...4).exe
macos-10.15-amd64
1RobloxPlay...4).exe
debian-12-armhf
RobloxPlay...4).exe
debian-12-mipsel
RobloxPlay...4).exe
debian-9-armhf
RobloxPlay...4).exe
debian-9-mips
RobloxPlay...4).exe
debian-9-mipsel
RobloxPlay...4).exe
ubuntu-18.04-amd64
RobloxPlay...4).exe
ubuntu-20.04-amd64
RobloxPlay...4).exe
ubuntu-22.04-amd64
RobloxPlay...4).exe
ubuntu-24.04-amd64
General
- Target RobloxPlayerInstaller (4).exe
- Size 13.2MB
- Sample261102-c62era119m
- SHA256 19c68344c5e95d70bb59475a696838b50d94216ccdbb6c27c6c29e4d729c0171
- MD5 b2d39424d98b15791a22ae607d85dd3f
- SHA1 5ff42a9afac12adbb60346c7f1bb923015683c48
- SHA512 7155696c4e4fae5a77ddfc55a50867625c4c94672a3825b4437bf7537cdecc9eff25cd106fe712da4c170f9eae7776cb3f87582ed1d548481d4944727a02f013
- SSDEEP 196608:oGNlRA0k5a4nF9Ljyl6OqZr5LT8EI3i5pAPtGEgT:oY8tFol6O+r5LT8EfYngT
- TLSH T118D69D6AB2B800E8D4BBD178C6465617EBB1B41603709BDF1AA046F61F63BE41F7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RobloxPlayerInstaller (4).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
RobloxPlayerInstaller (4).exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
RobloxPlayerInstaller (4).exe
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
RobloxPlayerInstaller (4).exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
RobloxPlayerInstaller (4).exe
Resource
android-x64-20260325-en
Behavioral task
behavioral6
Sample
RobloxPlayerInstaller (4).exe
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral7
Sample
RobloxPlayerInstaller (4).exe
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral8
Sample
RobloxPlayerInstaller (4).exe
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral9
Sample
RobloxPlayerInstaller (4).exe
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
RobloxPlayerInstaller (4).exe
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral11
Sample
RobloxPlayerInstaller (4).exe
Resource
macos-20260915-en
Behavioral task
behavioral12
Sample
RobloxPlayerInstaller (4).exe
Resource
debian12-armhf-20260513-en
Behavioral task
behavioral13
Sample
RobloxPlayerInstaller (4).exe
Resource
debian12-mipsel-20260513-en
Behavioral task
behavioral14
Sample
RobloxPlayerInstaller (4).exe
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
RobloxPlayerInstaller (4).exe
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
RobloxPlayerInstaller (4).exe
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
RobloxPlayerInstaller (4).exe
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
RobloxPlayerInstaller (4).exe
Resource
ubuntu2004-amd64-20261019-en
Behavioral task
behavioral19
Sample
RobloxPlayerInstaller (4).exe
Resource
ubuntu2204-amd64-20261019-en
Behavioral task
behavioral20
Sample
RobloxPlayerInstaller (4).exe
Resource
ubuntu2404-amd64-20261019-en
Malware Config
Targets
-
- Target RobloxPlayerInstaller (4).exe
- Size 13.2MB
- SHA256 19c68344c5e95d70bb59475a696838b50d94216ccdbb6c27c6c29e4d729c0171
- MD5 b2d39424d98b15791a22ae607d85dd3f
- SHA1 5ff42a9afac12adbb60346c7f1bb923015683c48
- SHA512 7155696c4e4fae5a77ddfc55a50867625c4c94672a3825b4437bf7537cdecc9eff25cd106fe712da4c170f9eae7776cb3f87582ed1d548481d4944727a02f013
- SSDEEP 196608:oGNlRA0k5a4nF9Ljyl6OqZr5LT8EI3i5pAPtGEgT:oY8tFol6O+r5LT8EfYngT
- TLSH T118D69D6AB2B800E8D4BBD178C6465617EBB1B41603709BDF1AA046F61F63BE41F7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger