General
- Target BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
- Size 930KB
- Sample260713-wt45nadv4p
- SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
- MD5 aabbcd0ab0ce3549c085d24bcca4a079
- SHA1 b6ee5a8d012bc17bfbe6de038609a7ef02f89d77
- SHA512 ae075e89ca1d17f09d0b10bf3c2440728a8174458aa84724daa2f531c1371ab35cf671c08ddf9ea0977ebc09b7c9f1e10a105027d8e3f5342d9426cea906c6ef
- SSDEEP 24576:hivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYS:stCXWPh/m3mMzU5DYZpS
- TLSH T11815CE9D31A1C077C9130FF285E4DF671124F9913B23A62EA2912E997A30E925BF7137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
- Size 930KB
- SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
- MD5 aabbcd0ab0ce3549c085d24bcca4a079
- SHA1 b6ee5a8d012bc17bfbe6de038609a7ef02f89d77
- SHA512 ae075e89ca1d17f09d0b10bf3c2440728a8174458aa84724daa2f531c1371ab35cf671c08ddf9ea0977ebc09b7c9f1e10a105027d8e3f5342d9426cea906c6ef
- SSDEEP 24576:hivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYS:stCXWPh/m3mMzU5DYZpS
- TLSH T11815CE9D31A1C077C9130FF285E4DF671124F9913B23A62EA2912E997A30E925BF7137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.