General
- Target https://www.bluestacks.com/pt-br/index.html?utm_source=Google&utm_medium=CPC&utm_campaign=aw-ded-pt-br-bluestacks-brand&utm_source=google&utm_campaign=12328979017&utm_medium=ad&utm_content=606025723904&utm_term=bluestacks&gad_source=1&gad_campaignid=12328979017&gbraid=0AAAAADuKp7ozVO5CAmbzeF1nEJdP001ME&gclid=Cj0KCQjwlerQBhDMARIsAB16H-WKlaw256WN2ChZ9fLdsQD0SXbyC2wodiMcz25eYGNgfBDplm1C1ycaAhD3EALw_wcB
- Sample260531-b129esf151
Score
8/10
Malware Config
Targets
-
- Target https://www.bluestacks.com/pt-br/index.html?utm_source=Google&utm_medium=CPC&utm_campaign=aw-ded-pt-br-bluestacks-brand&utm_source=google&utm_campaign=12328979017&utm_medium=ad&utm_content=606025723904&utm_term=bluestacks&gad_source=1&gad_campaignid=12328979017&gbraid=0AAAAADuKp7ozVO5CAmbzeF1nEJdP001ME&gclid=Cj0KCQjwlerQBhDMARIsAB16H-WKlaw256WN2ChZ9fLdsQD0SXbyC2wodiMcz25eYGNgfBDplm1C1ycaAhD3EALw_wcB
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.