b0e8442f086043bb3393d0d183c1c15584a23329b395d083849357038cd62f5c | Triage

Sharing

General

Target

BlueStacks10Installer_10.3.10.1007_native_69c1917c590eb746be2331e2a8271c4d_MDs1LDM7MTUsMTsxNSw0OzE1_Q2hhcmxpZSBpbiBVbmRlcndvcmxkIQ==.exe
Size

899KB
Sample

230820-2nzkwabe2z
MD5

ece9793d2ba5110210e18aaad296c118
SHA1

1d27e806954290d7112e3c279dfbeb411cb610c9
SHA256

b0e8442f086043bb3393d0d183c1c15584a23329b395d083849357038cd62f5c
SHA512

3f8e08f45ae3f8a87b4a5cf6cd0995aa859557600bc77b1fc685ca95e7d50df7248f1891f021c3dd847cc78cc626a8b09b6e4199383795995dee853a6c1853b8
SSDEEP

12288:HivtCXQd0gjKX7zuqGK4FGPDy1xBVG2xswra36Q46ztIELbr01JwQ9j/3t:HivtCXWeGK4FGCG2xsXqP6h7biwUt

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  BlueStacks10Installer_10.3.10.1007_native_69c1917c590eb746be2331e2a8271c4d_MDs1LDM7MTUsMTsxNSw0OzE1_Q2hhcmxpZSBpbiBVbmRlcndvcmxkIQ==.exe
- Size
  
  899KB
- MD5
  
  ece9793d2ba5110210e18aaad296c118
- SHA1
  
  1d27e806954290d7112e3c279dfbeb411cb610c9
- SHA256
  
  b0e8442f086043bb3393d0d183c1c15584a23329b395d083849357038cd62f5c
- SHA512
  
  3f8e08f45ae3f8a87b4a5cf6cd0995aa859557600bc77b1fc685ca95e7d50df7248f1891f021c3dd847cc78cc626a8b09b6e4199383795995dee853a6c1853b8
- SSDEEP
  
  12288:HivtCXQd0gjKX7zuqGK4FGPDy1xBVG2xswra36Q46ztIELbr01JwQ9j/3t:HivtCXWeGK4FGCG2xsXqP6h7biwUt
Score

8^/10

evasion
- Downloads MZ/PE file
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Process Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2