General
- Target Roblox-External.exe
- Size 1.4MB
- Sample261113-dbm5bafv4m
- SHA256 633992ab1b7346333f925b4c35a647ab863539667b44aa1e0eded40fc3553581
- MD5 0b31ba5a2dce1a69d5e5f9cc48d62120
- SHA1 e9a3f989026128195ce2c5e43c8a5430fd8f69c3
- SHA512 abcd245096bd93756fd1af7acd406d34f90a321c7f8b4c4e00d253a1e7d43fda8036b270b6465109fc8bea8d5c718cc8f5b75ba8bb3c8886ac46b3d7371ecfb6
- SSDEEP 24576:DZnmVlM9kz4uq4skRtP6rS+8PZonYOKvqQttFEkLFr4GzvsGBMEYFn0DbK8kBo+n:sVlP4uq9kRtP8S+qZjOKvqQ49n0Db+Hn
- TLSH T18C65AE4BF6A505FCD47BC178C95AAA17EA76340C033099EF13E00A952F637E45A7BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Roblox-External.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roblox-External.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Roblox-External.exe
- Size 1.4MB
- SHA256 633992ab1b7346333f925b4c35a647ab863539667b44aa1e0eded40fc3553581
- MD5 0b31ba5a2dce1a69d5e5f9cc48d62120
- SHA1 e9a3f989026128195ce2c5e43c8a5430fd8f69c3
- SHA512 abcd245096bd93756fd1af7acd406d34f90a321c7f8b4c4e00d253a1e7d43fda8036b270b6465109fc8bea8d5c718cc8f5b75ba8bb3c8886ac46b3d7371ecfb6
- SSDEEP 24576:DZnmVlM9kz4uq4skRtP6rS+8PZonYOKvqQttFEkLFr4GzvsGBMEYFn0DbK8kBo+n:sVlP4uq9kRtP8S+qZjOKvqQ49n0Db+Hn
- TLSH T18C65AE4BF6A505FCD47BC178C95AAA17EA76340C033099EF13E00A952F637E45A7BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
Executes dropped EXE