Overview

overview

8

Static

static

1

BlueStacks...E1.exe

windows7-x64

8

BlueStacks...E1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    BlueStacksInstaller_5.10.210.1003_native_10c1ac7c2a1fd67641c71f3f4e128bc1_MzsxNSwwOzUsMTsxNSw0OzE1.exe

  • Size

    798KB

  • Sample

    230318-1ncwfafh91

  • MD5

    2bf659fc81797de381e5b3dfe1099f89

  • SHA1

    d201435cbebbbe8714510a9582c188e2c522910b

  • SHA256

    b089fe79e2bdfbc0c33bafe84160f70e7a84864dc61c5920d856743cf3ad003a

  • SHA512

    7f5d12a12a835f6309725bddd6d081ef4b786d976d3e104dce17d3909410b61557ad12f4a0696fef183ed4dfda1bf17174c3d7cb7df68e8466131daeb5bd2d8b

  • SSDEEP

    24576:givtCXF1jv6qQOqqPYx2Q/XmElHA80Wisc:ltCXH6JOBY5FRFlc

Score
8/10
discoveryevasionspywarestealer

Malware Config

Targets

    • Target

      BlueStacksInstaller_5.10.210.1003_native_10c1ac7c2a1fd67641c71f3f4e128bc1_MzsxNSwwOzUsMTsxNSw0OzE1.exe

    • Size

      798KB

    • MD5

      2bf659fc81797de381e5b3dfe1099f89

    • SHA1

      d201435cbebbbe8714510a9582c188e2c522910b

    • SHA256

      b089fe79e2bdfbc0c33bafe84160f70e7a84864dc61c5920d856743cf3ad003a

    • SHA512

      7f5d12a12a835f6309725bddd6d081ef4b786d976d3e104dce17d3909410b61557ad12f4a0696fef183ed4dfda1bf17174c3d7cb7df68e8466131daeb5bd2d8b

    • SSDEEP

      24576:givtCXF1jv6qQOqqPYx2Q/XmElHA80Wisc:ltCXH6JOBY5FRFlc

    Score
    8/10
    discoveryevasionspywarestealer

    • Downloads MZ/PE file

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks