831d7190c4b86d6b8993de26780c212ab692e0f37886a324331c69ed4748b2f5 | Triage

Sharing

General

Target

BlueStacksInstaller_5.13.220.1001_native_2bfcec35496fac01d35f2efd2b58195a_MzsxNSwwOzUsMTsxNSw0OzE1.exe
Size

899KB
Sample

231104-xmnd1adb3z
MD5

9193390ffd1ee47e585750079c2d61b4
SHA1

49887df7b513c4cdeec369a38b0917af0024c5b9
SHA256

831d7190c4b86d6b8993de26780c212ab692e0f37886a324331c69ed4748b2f5
SHA512

499c5a78e139ebfae40c9860325fa2dfc0dc5f8040e91d95a46b2d1497e653923b975482a051eb6d36952164a004fff8dcc9b1d75b037d8da3070c1114d83cdd
SSDEEP

24576:LivtCXWeGKhFGXFmUbAq/gGpBPbvNKPAz:utCXWPEc1mIAq/ggTVhz

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  BlueStacksInstaller_5.13.220.1001_native_2bfcec35496fac01d35f2efd2b58195a_MzsxNSwwOzUsMTsxNSw0OzE1.exe
- Size
  
  899KB
- MD5
  
  9193390ffd1ee47e585750079c2d61b4
- SHA1
  
  49887df7b513c4cdeec369a38b0917af0024c5b9
- SHA256
  
  831d7190c4b86d6b8993de26780c212ab692e0f37886a324331c69ed4748b2f5
- SHA512
  
  499c5a78e139ebfae40c9860325fa2dfc0dc5f8040e91d95a46b2d1497e653923b975482a051eb6d36952164a004fff8dcc9b1d75b037d8da3070c1114d83cdd
- SSDEEP
  
  24576:LivtCXWeGKhFGXFmUbAq/gGpBPbvNKPAz:utCXWPEc1mIAq/ggTVhz
Score

8^/10

discovery evasion persistence
- Downloads MZ/PE file
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistence