General

  • Target
    BlueStacksInstaller_5.22.260.1025_native_7511c73a33d3afad1eb673495a2f3976_MzsxNSwwOzUsNTsxNQ==.exe
  • Size 931KB
  • Sample260826-llws7sbm9s
  • SHA256 f67c0a0e19d9d67ff89a46f2f75a98c675cd3199ed7cfcd6438bd450baccc034
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      BlueStacksInstaller_5.22.260.1025_native_7511c73a33d3afad1eb673495a2f3976_MzsxNSwwOzUsNTsxNQ==.exe
    • Size 931KB
    • SHA256 f67c0a0e19d9d67ff89a46f2f75a98c675cd3199ed7cfcd6438bd450baccc034
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks