General
- Target BlueStacksInstaller_5.22.150.1014_native_0fec970d6759c607498c32164465c244_MzsxNSwwOzUsMTsxNSw0OzE1LDU7MTU=.exe
- Size 927KB
- Sample260707-a44e8aex4s
- SHA256 b06249725f21fe1f31ea308113cce607f0bf0fcb07045326a9b054bf8540657f
- MD5 b20983fffd8ca99e56a0fdc401ef0603
- SHA1 728473f1614714a6568d84f0e170f500ad49c52d
- SHA512 1727417071ea712fb407ad877c9787f4870fe3fcc4fc66f568bc154a7d49126b8250119eb7a058639b7fedd910a621c4a043c08ad0aae875abba17f9600645eb
- SSDEEP 24576:vivtCXWeGK1/NGzTukzxNL6tyZ0MRW6tp9nJFKCwpK:KtCXWPk/m3utA0MRW6t1
- TLSH T1F115CE9C20A1C077CA130FF285E5DF671114F9913B23A52EE2952EA97A70E925BF7133
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
BlueStacksInstaller_5.22.150.1014_native_0fec970d6759c607498c32164465c244_MzsxNSwwOzUsMTsxNSw0OzE1LDU7MTU=.exe
Resource
win10ltsc2021-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
BlueStacksInstaller_5.22.150.1014_native_0fec970d6759c607498c32164465c244_MzsxNSwwOzUsMTsxNSw0OzE1LDU7MTU=.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target BlueStacksInstaller_5.22.150.1014_native_0fec970d6759c607498c32164465c244_MzsxNSwwOzUsMTsxNSw0OzE1LDU7MTU=.exe
- Size 927KB
- SHA256 b06249725f21fe1f31ea308113cce607f0bf0fcb07045326a9b054bf8540657f
- MD5 b20983fffd8ca99e56a0fdc401ef0603
- SHA1 728473f1614714a6568d84f0e170f500ad49c52d
- SHA512 1727417071ea712fb407ad877c9787f4870fe3fcc4fc66f568bc154a7d49126b8250119eb7a058639b7fedd910a621c4a043c08ad0aae875abba17f9600645eb
- SSDEEP 24576:vivtCXWeGK1/NGzTukzxNL6tyZ0MRW6tp9nJFKCwpK:KtCXWPk/m3utA0MRW6t1
- TLSH T1F115CE9C20A1C077CA130FF285E5DF671114F9913B23A52EE2952EA97A70E925BF7133
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.