General

  • Target

    Bluelock25_v5.rar

  • Size

    13.7MB

  • MD5

    0b54bea7e69c8a8850226f8b55bda921

  • SHA1

    35418bf6ad6be36b9f9ab270b64503076b93423d

  • SHA256

    45f3e6a343bcc0e9f300f401a7e9456eca715db6ce6eda5eb2f8d6eb6c0e3ded

  • SHA512

    465bf08dd30b7f6d985811692b02c16397eb356ffb4e251e0abe6b59f0da61269e87b68c5e12d05f2b8212325ff21726269c7a21d90de03005ffd7887a022574

  • SSDEEP

    196608:Z/hR3uJVihsnhwUYRga/AvpvhiirRwlIA+0nTOz7F8B7m587jusYAoGMck9lJ/pk:Z7wosaBRgfhZrml97TOzBCjFLKB9skrs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Bluelock25_v5.rar
    .rar
  • Cheetos/AmdFixForSome/BlueLock-Driver.sys
    .sys windows:10 windows x64 arch:x64

    115851158dc0dd3e30a44d227de052d3


    Code Sign

    Headers

    Imports

    Sections

  • Cheetos/BlueLock-Driver.sys
    .sys windows:10 windows x64 arch:x64

    513e3fd8a4a9f12178e6fbb51099dc2a


    Code Sign

    Headers

    Imports

    Sections

  • Cheetos/Bluelock.exe
    .exe windows:6 windows x64 arch:x64

    779b66ccb29bf22c09d072b477eaa3d5


    Headers

    Imports

    Sections

  • Cheetos/cpprest_2_10.dll
    .dll windows:6 windows x64 arch:x64

    69d1608d9e5da371bc894bb415ba714b


    Headers

    Imports

    Exports

    Sections

  • Cheetos/drv64.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • Cheetos/kdu.exe
    .exe windows:6 windows x64 arch:x64

    d7343acd8a08117f394fbb4463115abc


    Headers

    Imports

    Sections

  • README.txt
  • RunBeforeCheat.reg
  • Turn_OFF_Microsoft_Vulnerable_Driver_Blocklist.reg
  • update.txt