2dd5499fa75d18104f2795ab9d35359164d7d33a5e36d7bf3230fc84de89d897 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BlueStacksInstaller_5.20.0.1037_native_20f5e0f9aca00cb76285d7f9fcef3c67_MDs1LDM7MTUsMTsxNSw0OzE1.exe
Size

910KB
Sample

240113-ssj7bacdd7
MD5

e74fbbf578d1b34e4e8a34bfb1be3e5c
SHA1

819967b818e8f28a4680f4571b94185500a1bc1d
SHA256

2dd5499fa75d18104f2795ab9d35359164d7d33a5e36d7bf3230fc84de89d897
SHA512

e329f114aada14da75afc70d92de04e4f07090f5f5e120b7b9dc5c16f03dfaf38d092302e9a3940b8aa355a564aa6988c145a26c2fa9e66829ef5ac11058f9fa
SSDEEP

12288:livtCXQd0gjKX7zuqGK3D779TxgE98I9Le3sHa3z+TyPyr+XCZmEy42:livtCXWeGKb9Txt9pLe8N+ayUmEx2

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  BlueStacksInstaller_5.20.0.1037_native_20f5e0f9aca00cb76285d7f9fcef3c67_MDs1LDM7MTUsMTsxNSw0OzE1.exe
- Size
  
  910KB
- MD5
  
  e74fbbf578d1b34e4e8a34bfb1be3e5c
- SHA1
  
  819967b818e8f28a4680f4571b94185500a1bc1d
- SHA256
  
  2dd5499fa75d18104f2795ab9d35359164d7d33a5e36d7bf3230fc84de89d897
- SHA512
  
  e329f114aada14da75afc70d92de04e4f07090f5f5e120b7b9dc5c16f03dfaf38d092302e9a3940b8aa355a564aa6988c145a26c2fa9e66829ef5ac11058f9fa
- SSDEEP
  
  12288:livtCXQd0gjKX7zuqGK3D779TxgE98I9Le3sHa3z+TyPyr+XCZmEy42:livtCXWeGKb9Txt9pLe8N+ayUmEx2
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
- Downloads MZ/PE file
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1