General

  • Target
    BlueStacks10Installer_10.42.241.1001_native_efe715c9b48530e6126e7106ead70fac_MzsxNSwwOzUsNTsxNQ==_V2F0Y2hsaXN0IFBybyBUVg==.exe
  • Size 930KB
  • Sample260714-ts4rdsaz8y
  • SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      BlueStacks10Installer_10.42.241.1001_native_efe715c9b48530e6126e7106ead70fac_MzsxNSwwOzUsNTsxNQ==_V2F0Y2hsaXN0IFBybyBUVg==.exe
    • Size 930KB
    • SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies Windows Firewall

MITRE ATT&CK Enterprise v16

Tasks