Behavioral task
behavioral1
Sample
ntfsformac.dmg
Resource
macos-20220504-en
Behavioral task
behavioral2
Sample
iBoysoft NTFS for Mac/EULA.pdf
Resource
win7-20231023-en
Behavioral task
behavioral3
Sample
iBoysoft NTFS for Mac/EULA.pdf
Resource
win10v2004-20231023-en
General
-
Target
98724fdbf92526a47385d09c1b6b575bd1c46c46f2908b81396627915daffd81
-
Size
16.0MB
-
MD5
f30b8058b73ff9eed6edff5d5f5d7456
-
SHA1
80e86cab2a67ec996d73c69c8dc4cb3338d728f4
-
SHA256
98724fdbf92526a47385d09c1b6b575bd1c46c46f2908b81396627915daffd81
-
SHA512
0d90874bdd3d217d4c2c8ba59144851449acf14554451fc942f347e281a0f1893ba80162b28e45ea52e755cdfd14cd844eec72563217a688246bbbaf963b67e4
-
SSDEEP
393216:0qgF9OksKTJKbQysCq7TWLlZhUkaWQZq5zIRSyGaFU:JgLTJ9RCkT+ZhUJWQZEzgrGaS
Malware Config
Signatures
Files
-
98724fdbf92526a47385d09c1b6b575bd1c46c46f2908b81396627915daffd81.zip
-
ntfsformac.dmg.dmg macos
-
iBoysoft NTFS for Mac/.DS_Store
-
iBoysoft NTFS for Mac/.VolumeIcon.icns
-
iBoysoft NTFS for Mac/.VolumeIcon.icns:com.apple.quarantine
-
iBoysoft NTFS for Mac/.background/bkg.tiff
-
iBoysoft NTFS for Mac/.fseventsd/0000000027e20839.gz
-
0000000027e20839
-
iBoysoft NTFS for Mac/.fseventsd/0000000027e2083a.gz
-
0000000027e2083a
-
iBoysoft NTFS for Mac/.fseventsd/fseventsd-uuid
-
iBoysoft NTFS for Mac/.tracking.plist.xml
-
iBoysoft NTFS for Mac/.tracking.plist:com.apple.lastuseddate#PS
-
iBoysoft NTFS for Mac/.tracking.plist:com.apple.metadata_kMDLabel_kmtczgrkebgc2ypuz7dmtqtuk4
-
iBoysoft NTFS for Mac/EULA.pdf.pdf
-
http://iboysoft.com
-
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.lastuseddate#PS
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.metadata_kMDItemKeyphraseConfidences
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.metadata_kMDItemKeyphraseLabels
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.metadata_kMDItemKeyphraseVersion
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.metadata_kMDItemTextContentLanguage
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.metadata_kMDItemWhereFroms
-
iBoysoft NTFS for Mac/EULA.pdf:com.apple.quarantine
-
iBoysoft NTFS for Mac/Install.pkg.xar
-
Bom
-
PackageInfo
-
Payload.gz
-
Payload
-
Scripts.gz
-
Scripts
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc.xml
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc:com.apple.TextEncoding
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc:com.apple.lastuseddate#PS
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc:com.apple.macl
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc:com.apple.metadata_kMDLabel_kmtczgrkebgc2ypuz7dmtqtuk4
-
iBoysoft NTFS for Mac/M3 BitLocker Loader.webloc:rsrc
-
iBoysoft NTFS for Mac/Open Support Center.webloc.xml
-
iBoysoft NTFS for Mac/Open Support Center.webloc:com.apple.lastuseddate#PS
-
iBoysoft NTFS for Mac/Open Support Center.webloc:com.apple.macl
-
iBoysoft NTFS for Mac/Open Support Center.webloc:com.apple.quarantine
-
iBoysoft NTFS for Mac/Open Support Center.webloc:rsrc