General

  • Target

    Bloxstrap.exe

  • Size

    12.1MB

  • Sample

    250103-cwne5svqhs

  • MD5

    46295c1d8df5f85c221128c535ea2db3

  • SHA1

    4c73ff010dbd6aa0d8011ed97c26332c4db59c51

  • SHA256

    44c24e0bd6d7c55fa04e6b54af159e81a9a260e42f50886c6f0918d710df4361

  • SHA512

    30eb4c36c154435a99c03c8cd685fb72c458e1877f7d69d4d800df6643bea508faeae90d9e863e18799382bd64b61f029464913e345220062fc7d34aeba0285b

  • SSDEEP

    98304:taM/VGMTsAd5DwasGUsy/vGWD39ALOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTls:taM/V7sisGUv/vGPLObAbN0h

Malware Config

Targets

    • Target

      Bloxstrap.exe

    • Size

      12.1MB

    • MD5

      46295c1d8df5f85c221128c535ea2db3

    • SHA1

      4c73ff010dbd6aa0d8011ed97c26332c4db59c51

    • SHA256

      44c24e0bd6d7c55fa04e6b54af159e81a9a260e42f50886c6f0918d710df4361

    • SHA512

      30eb4c36c154435a99c03c8cd685fb72c458e1877f7d69d4d800df6643bea508faeae90d9e863e18799382bd64b61f029464913e345220062fc7d34aeba0285b

    • SSDEEP

      98304:taM/VGMTsAd5DwasGUsy/vGWD39ALOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTls:taM/V7sisGUv/vGPLObAbN0h

    • Detects RedTiger Stealer

    • Redtiger family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks