General
- Target BlueStacks10Installer_10.42.241.1001_native_efe715c9b48530e6126e7106ead70fac_MzsxNSwwOzUsNTsxNQ==_V2F0Y2hsaXN0IFBybyBUVg==.exe
- Size 930KB
- Sample260714-ts4rdsaz8y
- SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
- MD5 aabbcd0ab0ce3549c085d24bcca4a079
- SHA1 b6ee5a8d012bc17bfbe6de038609a7ef02f89d77
- SHA512 ae075e89ca1d17f09d0b10bf3c2440728a8174458aa84724daa2f531c1371ab35cf671c08ddf9ea0977ebc09b7c9f1e10a105027d8e3f5342d9426cea906c6ef
- SSDEEP 24576:hivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYS:stCXWPh/m3mMzU5DYZpS
- TLSH T11815CE9D31A1C077C9130FF285E4DF671124F9913B23A62EA2912E997A30E925BF7137
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BlueStacks10Installer_10.42.241.1001_native_efe715c9b48530e6126e7106ead70fac_MzsxNSwwOzUsNTsxNQ==_V2F0Y2hsaXN0IFBybyBUVg==.exe
Resource
win11-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target BlueStacks10Installer_10.42.241.1001_native_efe715c9b48530e6126e7106ead70fac_MzsxNSwwOzUsNTsxNQ==_V2F0Y2hsaXN0IFBybyBUVg==.exe
- Size 930KB
- SHA256 97ca4c40c38792e1b25c77d3d73f01d8c81b605a6d3b4ae111b642d722cba774
- MD5 aabbcd0ab0ce3549c085d24bcca4a079
- SHA1 b6ee5a8d012bc17bfbe6de038609a7ef02f89d77
- SHA512 ae075e89ca1d17f09d0b10bf3c2440728a8174458aa84724daa2f531c1371ab35cf671c08ddf9ea0977ebc09b7c9f1e10a105027d8e3f5342d9426cea906c6ef
- SSDEEP 24576:hivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYS:stCXWPh/m3mMzU5DYZpS
- TLSH T11815CE9D31A1C077C9130FF285E4DF671124F9913B23A62EA2912E997A30E925BF7137
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1