Overview

overview

10

Static

static

1

OfficeNote

macos-10.15-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    OfficeNote

  • Size

    328KB

  • Sample

    230821-tp6ftaeb67

  • MD5

    42f942691bec23b60dcd5a587a2ec43f

  • SHA1

    47cacf7497c92aab6cded8e59d2104215d8fab86

  • SHA256

    2f513e4706cf8cd54f8c859afbbb581d36fe25ae113867d52a7dcafe1ed972c7

  • SHA512

    3bd086d422c73db924cd55b14dcd932e8ffee913c0071e17e23f44d65d6354fdc1604e7cfcb97d55cdc23f0e07113f3c3c999ea12e02dfadc0b9ca9e94bebfc0

  • SSDEEP

    6144:jwoqrU5yBcX/IPLAmvX+5q4PhMD9bBK9zRyhQDqGEM/vdruZE:L58ANcUhyBK6hQ2BMHdro

Score
10/10
xloaderloadermacosrat

Malware Config

Targets

    • Target

      OfficeNote

    • Size

      328KB

    • MD5

      42f942691bec23b60dcd5a587a2ec43f

    • SHA1

      47cacf7497c92aab6cded8e59d2104215d8fab86

    • SHA256

      2f513e4706cf8cd54f8c859afbbb581d36fe25ae113867d52a7dcafe1ed972c7

    • SHA512

      3bd086d422c73db924cd55b14dcd932e8ffee913c0071e17e23f44d65d6354fdc1604e7cfcb97d55cdc23f0e07113f3c3c999ea12e02dfadc0b9ca9e94bebfc0

    • SSDEEP

      6144:jwoqrU5yBcX/IPLAmvX+5q4PhMD9bBK9zRyhQDqGEM/vdruZE:L58ANcUhyBK6hQ2BMHdro

    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader payload

      rat
    behavioral1

MITRE ATT&CK Matrix

Tasks