General
- Target Bloxstrap.exe
- Size 12.1MB
- Sample250103-cwne5svqhs
- SHA256 44c24e0bd6d7c55fa04e6b54af159e81a9a260e42f50886c6f0918d710df4361
- MD5 46295c1d8df5f85c221128c535ea2db3
- SHA1 4c73ff010dbd6aa0d8011ed97c26332c4db59c51
- SHA512 30eb4c36c154435a99c03c8cd685fb72c458e1877f7d69d4d800df6643bea508faeae90d9e863e18799382bd64b61f029464913e345220062fc7d34aeba0285b
- SSDEEP 98304:taM/VGMTsAd5DwasGUsy/vGWD39ALOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTls:taM/V7sisGUv/vGPLObAbN0h
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Bloxstrap.exe
Resource
win7-20241010-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bloxstrap.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Bloxstrap.exe
- Size 12.1MB
- SHA256 44c24e0bd6d7c55fa04e6b54af159e81a9a260e42f50886c6f0918d710df4361
- MD5 46295c1d8df5f85c221128c535ea2db3
- SHA1 4c73ff010dbd6aa0d8011ed97c26332c4db59c51
- SHA512 30eb4c36c154435a99c03c8cd685fb72c458e1877f7d69d4d800df6643bea508faeae90d9e863e18799382bd64b61f029464913e345220062fc7d34aeba0285b
- SSDEEP 98304:taM/VGMTsAd5DwasGUsy/vGWD39ALOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTls:taM/V7sisGUv/vGPLObAbN0h
- MD5 SHA1 SHA512 SSDEEP
-
Detects RedTiger Stealer
-
Redtiger family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.