Overview
overview
3Static
static
3BSTweaker5...r5.exe
windows7-x64
1BSTweaker5...r5.exe
windows10-2004-x64
1BSTweaker5...ip.dll
windows7-x64
1BSTweaker5...ip.dll
windows10-2004-x64
1BSTweaker5...op.dll
windows7-x64
1BSTweaker5...op.dll
windows10-2004-x64
1BSTweaker5...ns.dll
windows7-x64
1BSTweaker5...ns.dll
windows10-2004-x64
1BSTweaker5...ks.dll
windows7-x64
1BSTweaker5...ks.dll
windows10-2004-x64
1BSTweaker5...IO.dll
windows7-x64
1BSTweaker5...IO.dll
windows10-2004-x64
1BSTweaker5...me.dll
windows7-x64
1BSTweaker5...me.dll
windows10-2004-x64
1BSTweaker5...ks.dll
windows7-x64
1BSTweaker5...ks.dll
windows10-2004-x64
1BSTweaker5...bs.dll
windows7-x64
1BSTweaker5...bs.dll
windows10-2004-x64
1BSTweaker5...s2.dll
windows7-x64
1BSTweaker5...s2.dll
windows10-2004-x64
1BSTweaker5...79.apk
android-9-x86
BSTweaker5...79.apk
android-10-x64
BSTweaker5...79.apk
android-11-x64
BSTweaker5.../suX86
ubuntu-18.04-amd64
1Analysis
-
max time kernel
151s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
16-11-2023 02:00
Static task
static1
Behavioral task
behavioral1
Sample
BSTweaker5/BlueStacksTweaker5.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral2
Sample
BSTweaker5/BlueStacksTweaker5.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
BSTweaker5/DLLs/Ionic.Zip.dll
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral4
Sample
BSTweaker5/DLLs/Ionic.Zip.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.Extensions.Desktop.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral6
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.Extensions.Desktop.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.Extensions.dll
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral8
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.Extensions.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.dll
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral10
Sample
BSTweaker5/DLLs/Microsoft.Threading.Tasks.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
BSTweaker5/DLLs/System.IO.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral12
Sample
BSTweaker5/DLLs/System.IO.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
BSTweaker5/DLLs/System.Runtime.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral14
Sample
BSTweaker5/DLLs/System.Runtime.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
BSTweaker5/DLLs/System.Threading.Tasks.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral16
Sample
BSTweaker5/DLLs/System.Threading.Tasks.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
BSTweaker5/DLLs/bs.dll
Resource
win7-20231025-en
windows7-x64
Behavioral task
behavioral18
Sample
BSTweaker5/DLLs/bs.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
BSTweaker5/DLLs/bs2.dll
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral20
Sample
BSTweaker5/DLLs/bs2.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
BSTweaker5/Utils/SuperSU_v2.79.apk
Resource
android-x86-arm-20231023-en
android-9-x86
Behavioral task
behavioral22
Sample
BSTweaker5/Utils/SuperSU_v2.79.apk
Resource
android-x64-20231023.1-en
android-10-x64
Behavioral task
behavioral23
Sample
BSTweaker5/Utils/SuperSU_v2.79.apk
Resource
android-x64-arm64-20231023-en
android-11-x64
Behavioral task
behavioral24
Sample
BSTweaker5/Utils/suX86
Resource
ubuntu1804-amd64-20231026-en
ubuntu-18.04-amd64
General
-
Target
BSTweaker5/BlueStacksTweaker5.exe
-
Size
422KB
-
MD5
bcea2cb38e00193dc5d55dac4bcb9d73
-
SHA1
d105c924f088e7a464a7449e7fd3f1bfd22a43d7
-
SHA256
e5f89d20152438bd8106a1ce15019b9dcd83e1e5b65d10f0a0a00770d0b60a11
-
SHA512
6c5f4efa2921dd077af3ef6871ca38979c924780ae538ba08be6209e5a14a7f03b1ab4bcbbaf87bce07f46806389a3e34e9999d1dd9179db7fb59f279080ef75
-
SSDEEP
12288:CKJxMaOOOOOOOOOO1HHYozE29a4V2PBLy3oU:CYbHvL9zGBLy3/
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe 2040 BlueStacksTweaker5.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2040 BlueStacksTweaker5.exe