Overview

overview

10

Static

static

3

Bloxstrap.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bloxstrap.exe

  • Size

    10.8MB

  • Sample

    250220-l26y4stqx5

  • MD5

    05fe4ab617fb8a0e6df903e14b3312c9

  • SHA1

    04500479b9e6cdfbaf431634cfbfd496214c80ca

  • SHA256

    b4e27af0caf72026adc98fa65d34d5fe22882b2c3b36291f39fb2c69b3183efc

  • SHA512

    acff0e95ba628ed724ad331b1e5701f5cef343cb8ee5aa44aff0c5907453abaca68b874c7275a61d835d982ac18e0a1ffafa9289c7e72b9cc8b79c564b46c3da

  • SSDEEP

    98304:sbDOHTscod5DBasbk1mvGWD3vOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlW:sbDascFsbk1mvG6ObAbN0l

Score
10/10
meduzadefense_evasiondiscoverystealertrojan

Malware Config

Targets

    • Target

      Bloxstrap.exe

    • Size

      10.8MB

    • MD5

      05fe4ab617fb8a0e6df903e14b3312c9

    • SHA1

      04500479b9e6cdfbaf431634cfbfd496214c80ca

    • SHA256

      b4e27af0caf72026adc98fa65d34d5fe22882b2c3b36291f39fb2c69b3183efc

    • SHA512

      acff0e95ba628ed724ad331b1e5701f5cef343cb8ee5aa44aff0c5907453abaca68b874c7275a61d835d982ac18e0a1ffafa9289c7e72b9cc8b79c564b46c3da

    • SSDEEP

      98304:sbDOHTscod5DBasbk1mvGWD3vOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlW:sbDascFsbk1mvG6ObAbN0l

    Score
    10/10
    meduzadefense_evasiondiscoverystealertrojan

    • Meduza

      Meduza is a crypto wallet and info stealer written in C++.

      stealermeduza

    • Meduza Stealer payload

    • Meduza family

      meduza

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks