General

  • Target
    BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
  • Size 930KB
  • Sample260713-wt45nadv4p
  • SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      BlueStacksInstaller_5.22.241.1001_native_b81524d6284814439c6a2c2d7b034751_MzsxNSwwOzUsNTsxNQ==.exe
    • Size 930KB
    • SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks