6d996f70f6b9f99e4ae0aad1f28d224c84c22194551ca4e21f56127eb563faea | Triage

Sharing

General

Target

BlueStacksInstaller_5.21.218.1001_native_6a3bdb61a473dbfd558f9f4b4bea82ab_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
Size

911KB
Sample

241026-stl3astlgx
MD5

05cd50890a8efa95d686384d2d96c530
SHA1

ad496d950142315aa8662edb002549e84d3de424
SHA256

6d996f70f6b9f99e4ae0aad1f28d224c84c22194551ca4e21f56127eb563faea
SHA512

6dc050e3c6577299ba4bcc306d1866ddea3eb2499f75f1de96e435d03f03b0ccf4021602be0eb6c816d7a0e81ce29590de247a084d67e88a64fa6ced4043bcf3
SSDEEP

24576:bivtCXWeGKM8WolR74uEFQWa3GZllJCGt3:+tCXWPIWofUuCQWa25JN3

Score

5^/10

discovery evasion macos

Malware Config

Targets

- Target
  
  BlueStacksInstaller_5.21.218.1001_native_6a3bdb61a473dbfd558f9f4b4bea82ab_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
- Size
  
  911KB
- MD5
  
  05cd50890a8efa95d686384d2d96c530
- SHA1
  
  ad496d950142315aa8662edb002549e84d3de424
- SHA256
  
  6d996f70f6b9f99e4ae0aad1f28d224c84c22194551ca4e21f56127eb563faea
- SHA512
  
  6dc050e3c6577299ba4bcc306d1866ddea3eb2499f75f1de96e435d03f03b0ccf4021602be0eb6c816d7a0e81ce29590de247a084d67e88a64fa6ced4043bcf3
- SSDEEP
  
  24576:bivtCXWeGKM8WolR74uEFQWa3GZllJCGt3:+tCXWPIWofUuCQWa25JN3
Score

5^/10

discovery evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3