General
-
Target
Bloxstrap-v2.7.0.exe
-
Size
10.1MB
-
Sample
240807-m1drlsxeqq
-
MD5
2c752edef5b0aa0962a3e01c4c82a2fa
-
SHA1
9c3afd1c63f2b0dbdc2dc487709471222d2cb81e
-
SHA256
891846bf656253ca1cdd28584a28681e9604e2a03d74cd6b99313e3bff11daf8
-
SHA512
04d25fe7d40c8c320ffc545a038ad6ea458df6a8a552b0e0393b369a03b9bf273c72f30169bd54e8eb10757c04bdddf3859c601c1eb9e1a12fe4d15658906dfe
-
SSDEEP
98304:TYd5DQd5Dk9Tsed5DogTrBKvGWD3nIOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrT4:Tasx3vG6IObAbN0T
Static task
static1
Behavioral task
behavioral1
Sample
Bloxstrap-v2.7.0.exe
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
Bloxstrap-v2.7.0.exe
-
Size
10.1MB
-
MD5
2c752edef5b0aa0962a3e01c4c82a2fa
-
SHA1
9c3afd1c63f2b0dbdc2dc487709471222d2cb81e
-
SHA256
891846bf656253ca1cdd28584a28681e9604e2a03d74cd6b99313e3bff11daf8
-
SHA512
04d25fe7d40c8c320ffc545a038ad6ea458df6a8a552b0e0393b369a03b9bf273c72f30169bd54e8eb10757c04bdddf3859c601c1eb9e1a12fe4d15658906dfe
-
SSDEEP
98304:TYd5DQd5Dk9Tsed5DogTrBKvGWD3nIOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrT4:Tasx3vG6IObAbN0T
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-