5c0c8522adeb0b2b5c492e9458b97ef0a2205ce81b7b831010cfe54b2b46db48 | Triage

Resubmissions

05-06-2023 14:45

230605-r414jahb43 6

05-06-2023 14:42

230605-r26k8shb24 10

05-06-2023 14:41

230605-r2q6jshf8y 3

05-06-2023 14:35

230605-rxy1lahf7t 10

Sharing

General

Target

5c0c8522adeb0b2b5c492e9458b97ef0a2205ce81b7b831010cfe54b2b46db48
Size

720KB
Sample

230605-r414jahb43
MD5

89541d318cbcbd02be55b6cf1413e952
SHA1

993b6b723732f26e83475336824ad4a0df0651e0
SHA256

5c0c8522adeb0b2b5c492e9458b97ef0a2205ce81b7b831010cfe54b2b46db48
SHA512

ad9dfbaf1b001f62b2af626e63937421d914aab2a754c1535fc73f63522b2296973ec9cdd0a713a7289333a66dced8765f3bb43103b694d3a43c8b1e23245125
SSDEEP

12288:9MrLy90pnKSGK56I3MbmB4mLCEqh5jgzaGl097e3/HXbQ3QiEqFbMRi:yywnEgCZUcjgzX3Ps3bEIbSi

Score

6^/10

macos

Malware Config

Targets

- Target
  
  5c0c8522adeb0b2b5c492e9458b97ef0a2205ce81b7b831010cfe54b2b46db48
- Size
  
  720KB
- MD5
  
  89541d318cbcbd02be55b6cf1413e952
- SHA1
  
  993b6b723732f26e83475336824ad4a0df0651e0
- SHA256
  
  5c0c8522adeb0b2b5c492e9458b97ef0a2205ce81b7b831010cfe54b2b46db48
- SHA512
  
  ad9dfbaf1b001f62b2af626e63937421d914aab2a754c1535fc73f63522b2296973ec9cdd0a713a7289333a66dced8765f3bb43103b694d3a43c8b1e23245125
- SSDEEP
  
  12288:9MrLy90pnKSGK56I3MbmB4mLCEqh5jgzaGl097e3/HXbQ3QiEqFbMRi:yywnEgCZUcjgzX3Ps3bEIbSi
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Tasks

static1

behavioral1