Overview

overview

1

Static

static

1

Dropzone 4...R].dmg

macos-10.15-amd64

Dropzone 4...T].dmg

macos-10.15-amd64

1

Dropzone 4...ion.py

macos-10.15-amd64

Dropzone 4...ve.ps1

macos-10.15-amd64

Dropzone 4...ur.ps1

macos-10.15-amd64

Dropzone 4...hua.py

macos-10.15-amd64

1

Dropzone 4...one.py

macos-10.15-amd64

1

Dropzone 4...one.rb

macos-10.15-amd64

1

Dropzone 4....dylib

macos-10.15-amd64

1

Dropzone 4...cOS/fc

macos-10.15-amd64

1

Dropzone 4...opy.rb

macos-10.15-amd64

1

Dropzone 4...api.rb

macos-10.15-amd64

1

Dropzone 4...ner.py

macos-10.15-amd64

1

Dropzone 4...ner.rb

macos-10.15-amd64

1

Dropzone 4...ash.rb

macos-10.15-amd64

1

Dropzone 4...ser.rb

macos-10.15-amd64

1

Dropzone 4...les.rb

macos-10.15-amd64

1

Dropzone 4...tLogin

macos-10.15-amd64

1

Dropzone 4...zone 4

macos-10.15-amd64

1

Dropzone 4...opzone

macos-10.15-amd64

1

Dropzone 4...ts.rtf

macos-10.15-amd64

1

Dropzone 4...ing.js

macos-10.15-amd64

Dropzone 4...min.js

macos-10.15-amd64

Dropzone 4...min.js

macos-10.15-amd64

Dropzone 4...h.html

macos-10.15-amd64

1

Dropzone 4....dylib

macos-10.15-amd64

1

Dropzone 4.../rhash

macos-10.15-amd64

1

Dropzone 4...iendly

macos-10.15-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dropzone 4 Pro 4.80.4 macOS [FileCR].dmg

  • Size

    63.1MB

  • Sample

    231210-v36jeaach2

  • MD5

    2e07f053f0687c22de56389e3410e9ac

  • SHA1

    8271e670115ba9fed77554a75b2ea672fcd0d7e8

  • SHA256

    f18bb69c42a3ba855b0815ad141348b086469f48e351c334b6d0a5959f6d46e9

  • SHA512

    22382e485df4e7906ceeccd6909820a243984e08905954acb2b0bdba15ea3eeee834cfc1d812efdfd0ce0edbab96af918c1e2651ff9484af45c4dfbb3d85fa00

  • SSDEEP

    1572864:WSewTVCYOdL4zvov6dGLje4r3y8Tqe65t9Zy:WSBbON4zovLamqe65t

Score
1/10
macos

Malware Config

Targets

    • Target

      Dropzone 4 Pro 4.80.4 macOS [FileCR].dmg

    • Size

      63.1MB

    • MD5

      2e07f053f0687c22de56389e3410e9ac

    • SHA1

      8271e670115ba9fed77554a75b2ea672fcd0d7e8

    • SHA256

      f18bb69c42a3ba855b0815ad141348b086469f48e351c334b6d0a5959f6d46e9

    • SHA512

      22382e485df4e7906ceeccd6909820a243984e08905954acb2b0bdba15ea3eeee834cfc1d812efdfd0ce0edbab96af918c1e2651ff9484af45c4dfbb3d85fa00

    • SSDEEP

      1572864:WSewTVCYOdL4zvov6dGLje4r3y8Tqe65t9Zy:WSBbON4zovLamqe65t

    Score
    1/10
    behavioral1

    • Target

      Dropzone 4 4.80.4/Manual install/Dropzone 4 4.80.4 [TNT].dmg

    • Size

      59.4MB

    • MD5

      649fd67bb6aa464617994d379bb5c998

    • SHA1

      509788708cbec9c25227e62a608134611c39a8b3

    • SHA256

      57fe8adf081e4ec9e9d4e4c0298401750f99376e2c2effcd177b95f48b5b1618

    • SHA512

      1fc4e523e3a9550873d697673562e28eab2f3aafa4732272fed63c2f3e9098f020af818635e471b37829d87e33dda6b72f06fc541c2bcc47110560a8a48c24df

    • SSDEEP

      1572864:4ewTVCYOdL4zvov6dGLje4r3y8Tqe65t9Z:4BbON4zovLamqe65t

    Score
    1/10
    behavioral2

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/Custom Action Python Template.dzbundle/action.py

    • Size

      2KB

    • MD5

      38cf51f41d0c811052c61ea07ea32cf2

    • SHA1

      91ded8e7957ff371fd856b1e522204540989ed8b

    • SHA256

      b38ebafddc4df0e0dd42b98e416588e3d663814437b882d12a590ded15263a0a

    • SHA512

      89864b94f2a106bccf87900f5b9ebb7108e39121be8565509277bee7faa1c175832bfde6476559eceb67c0fc1993deac04c10c3764c51f8e397f25b294bf043f

    Score
    1/10
    behavioral3

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/Google Drive.dzbundle/gdrive.rb

    • Size

      6KB

    • MD5

      c01cce580510d89adea7716b7a349310

    • SHA1

      96047f7cfbae616798602c260f4bd3e24564a578

    • SHA256

      1a729a209660e914043e00d8ecf2ca76ae68cff9792ca5f2f94eda4ac444924d

    • SHA512

      cc0ad114cc991dfe6874256510e9b94130a8e51ef358107e9b0f2cf08eaf2340daa8e3c9e3914465a7a85fcda9f1cc11b2321bd42c2393f7b82740b7cc800486

    • SSDEEP

      192:wOxGRvxGlcgjtExipbqYLsKd8CCJVmVYdRyv0:wKGnGltWxshsI2JOc

    Score
    1/10
    behavioral4

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/Imgur.dzbundle/imgur.rb

    • Size

      1KB

    • MD5

      f8b472834da4695c3dbc1fbf9b37df7e

    • SHA1

      5da6068e0bcdf6c51978aea165538be2bc7b29cf

    • SHA256

      b063405291fc3532cddaca1d13890540a55d8992d793cfb83840fad3ee6f9f94

    • SHA512

      9738504a6516cf8c664971fe1dd84dd6f21b8e4c44f47597da44acc0f35746dc4e7923e93bedd8b98e6dc04004ebf4dd9e1291094b169d5b377c5fb21f22301c

    Score
    1/10
    behavioral5

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/Pashua.py

    • Size

      2KB

    • MD5

      a555004496f6a86497be46fe94db9839

    • SHA1

      9e1fc18f46c374a3f3e615ca3400b7f6d59a66c2

    • SHA256

      620eaf32dba0f4e10849125c590e500e53ab816b5467661c2634c311de0d0bcd

    • SHA512

      1302b9df3a8f80dd6f671cc388e3a6bff75be36b8200bf7c359e017fbcd19d3187e7432194247e37a558c3beb83b9851cf027d417f0528e8e782c5f0a87ff528

    Score
    1/10
    behavioral6

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/dropzone.py

    • Size

      2KB

    • MD5

      640224f8bb4a30628c3c8490233010e3

    • SHA1

      cd2a2f4aa2e392f9a674d7a61baa08df9ae4c96a

    • SHA256

      fc56f91b26a58ed4322479968b7a562adc4227d6c86812f198f8c1bd71c56a1d

    • SHA512

      35240d801819ccdca7fd023747de89fa971a82b9fdc8fbe857c5e1f23e9517688d07ea9dbff000d25a92741e2b4f99750d1e88bdc1c6210c32009c22ad3bab72

    Score
    1/10
    behavioral7

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/dropzone.rb

    • Size

      2KB

    • MD5

      ab228117b2da545cc5dc824a12dcefec

    • SHA1

      b02daa5efd027687d2150ed4b667ad517a870c7d

    • SHA256

      18e762bdc73a60b1868c7fe3b54f03a6dc4244fe8e6385076dab96a68820b7b3

    • SHA512

      aaa7a5face039855a719381dc3f75af15f56bdebd1691c000032353d6e5a88ebad68ea06377721993b13532f5e33d32c2031ce12b48c605ebafd6e6b510b9e89

    Score
    1/10
    behavioral8

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/fc.app/Contents/Frameworks/libswift_Concurrency.dylib

    • Size

      1.1MB

    • MD5

      bc4670478afc66da17de565ff360f10a

    • SHA1

      ef9853b6146796a90dcf4b7d845230324d34e700

    • SHA256

      9e44cbc3b80b0da5812edaeeec0e1195e8a0e0dcd1d49f3ed8efc9ea8c1d5d8b

    • SHA512

      4e38046f1909ba4382663dc47ffd5aa0c29b91decce1be915b686b72a93407d5c3313de86d0851a6f1913487264d9a39fccf64015eb5f950d6f9e2a96447b28f

    • SSDEEP

      24576:IJwMsIQ+ksHpHQptEQvSVIMNItdKLkuwu:IJbkmKGLXv

    Score
    1/10
    behavioral9

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/fc.app/Contents/MacOS/fc

    • Size

      315KB

    • MD5

      2a48ed8d0d3bb3c43e29d525b2f8b1d4

    • SHA1

      e8d559fbc4ed66f3fe11427da9f71e767e50a610

    • SHA256

      f3b5f27872a0c0820cefe877d6668fbc557b3a65e3d5ed6985d2791b18f1f464

    • SHA512

      5fb17415667203c8060c9a8d4d7a8f2dc1aff76d9b42660221e809bcc3ddbaf3ea2c137a7a4b88c3ddc27b87e4fb7a6428a94390e1a322aca1522a1b9d49edff

    • SSDEEP

      3072:zMRyUWKspkU0fSaPXBpp57OxfUgjNSifS8PJSvVCbmEUfPlcVOh1Rj:UyU16kpMxsgjTS8UNumEElHhLj

    Score
    1/10
    behavioral10

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/filecopy.rb

    • Size

      2KB

    • MD5

      a947686c0e0e0f012477ab3e4d6df5b0

    • SHA1

      29a5f931408772f11b2823f4787d154331e84326

    • SHA256

      1e108b372a03efb76dae1ad9830f7955af3d589af4ba3273efed68219b7d62f4

    • SHA512

      6f798b414a431097a780d9df82c9e1bd034ff4fac7213550376bdb82ebd777b1a41770d83f1987e65b45a54a91f7909c3e6232f21816428f70592fc8349b0f2d

    Score
    1/10
    behavioral11

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/pastie_api.rb

    • Size

      1KB

    • MD5

      65afb3e2028803b69d80c131ad5f6aa0

    • SHA1

      63e1641758b50a8cb80d53f620d2151a6da25d1c

    • SHA256

      5f539adc26f6264068b396ec3fed0c70d70b2a79029d9d355b8c277343c5190e

    • SHA512

      02ecda55edc5c5fbf2b6ee445862a6d3d750c185b09cbfb410553bacb0a22817e515fcc8c96abdc027c97a7ec5a45bfb8c176ec348cb72a2b661a0746f75f9b8

    Score
    1/10
    behavioral12

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/python_runner.py

    • Size

      212B

    • MD5

      db7f9d7c547b1e82efcbee434c9145ce

    • SHA1

      5741b11768400f729c75dbcb855d750c3516fa77

    • SHA256

      6106fe16ea91af458a5864c5497fc235aa0522669f151741a0bc0e8c0c7719c8

    • SHA512

      0b8349cf5eb1f452caf8259a8fb609c7ee96e0033d63b9de1f00c818af905b2e89e03a8f3b6449da9468c8fe04f6b51298862f996a1bdcbf55ce226525af86f5

    Score
    1/10
    behavioral13

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/runner.rb

    • Size

      1KB

    • MD5

      f5d05d3793a6f044403f0abe9f74a8e8

    • SHA1

      439f2796fc1e1bf5e0954fb3631477cfc75e54a0

    • SHA256

      66d3134ef22ddc9bb3e90365cf65abbf0754b1707912b3c8c3b432b13a532387

    • SHA512

      47466bf6a0a4aed5685ce4618da2250463a9d2b54c6b0fb67378ebfa5dc7c7653193e0cca1ef1cef54ac5952de2d23b5a994432087541ce05ca6f83d1e6fb6de

    Score
    1/10
    behavioral14

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/stash.rb

    • Size

      935B

    • MD5

      8e66a76e1f886116ae0e222a1db62ff2

    • SHA1

      28f5fd4d707df6d2c7436da3cf1a3414875053d5

    • SHA256

      8caaa952a0857ea108877c5e94c4419ee1faeecd4da954684d83d918e905744e

    • SHA512

      8505ef50cfb19ae3b17f91af9c2b4369019fa28056c27ed289ca340c3012796496abb3d38f0abcc5dd4b3a0a28c32b2c9ba1a1c7a09ddeec8d6064abbce07ab1

    Score
    1/10
    behavioral15

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb

    • Size

      1KB

    • MD5

      ffb2c32b20779ea2453a28f1d75f4b6d

    • SHA1

      23d8518da59cb09e1136cad03bb1d2aef0ac1ad6

    • SHA256

      4f88e2aa202dd9eacae899b8d02079f1855638379b2ddb63d45a2d26d5e2a394

    • SHA512

      6fd364317f9d81c671224d36451c413471afc6fc4cbfad4d61b5c49eb2ce724f106b17159fcf86391912745e69a09e16e2718dec8e1021303efc9ae8c5924a87

    Score
    1/10
    behavioral16

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/zip_files.rb

    • Size

      683B

    • MD5

      714381059d124e10b0a9415493b0cc49

    • SHA1

      fb526b59267f1c478d28fec32b8f6bf0b358ca96

    • SHA256

      659f572de3febb3517cd8a7d8f2705ea7301ba78c2d06014cd853c6d2743f5f8

    • SHA512

      c5e258f4a917248f2d510883eb9a293f52b169287887c87a97d090a54a20265886f53a844fcc22dfadac667e45496b461b0d34ec009985bdc1f77667be9d16ea

    Score
    1/10
    behavioral17

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Library/LoginItems/LaunchAtLogin.app/Contents/MacOS/LaunchAtLogin

    • Size

      148KB

    • MD5

      b92c02bc8562c5e00a6b4f7be36ee31e

    • SHA1

      29246919ed6077cf77537f15b480149e236ec9e3

    • SHA256

      545bfdbe8f20fc9e310404ccee576e5bf7c24b2a89d7c1e62094c5a8532df9c0

    • SHA512

      b9a70f494b9865e73f35e66a9ee12d874d083e246e5b3dbd8560ef9507c23a6ebbc98ccc0e6da1aa487f2f2cc06eb5d414f1905e55a437902a328417595b8969

    • SSDEEP

      384:UfieeFpptc5tXuHbr+Q8drgryrLIrNab8erIIrner6v8wCURI0fDr+Q8drgrerzo:KtU76t+d8kab8+C0jCURdd82Tab8

    Score
    1/10
    behavioral18

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/MacOS/Dropzone 4

    • Size

      8.5MB

    • MD5

      6ba2653a3008e044e5f0d5fe299cb036

    • SHA1

      dfc7f84f9b97f4e8ea06ae19a150f524ea9db9f3

    • SHA256

      a8b1820401d5c5aa4aa6604ea038bb018f080e4d8476cfa8ed35c43f37cbd597

    • SHA512

      db65d5ff98199f470849826d8764e92651d108cbf3be5dda3143ea7d919c6e816230b826a1c88d29efab912d04da29415a9cd08a3fa7b6d6bdb75df61b2fe1ab

    • SSDEEP

      196608:ECty8H73bs73qrKurqeEixeiY8GNCGYQj:pyo7rs7arKu+eEixeiY8GNCGn

    Score
    1/10
    behavioral19

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/PlugIns/Dropzone.appex/Contents/MacOS/Dropzone

    • Size

      202KB

    • MD5

      6c43eb34505bffb2bd98eebd4d467182

    • SHA1

      bc66fcffbd08beee460f609c573c94a22d22b2b8

    • SHA256

      2e470d75f123ecfa07f26089ed6bfb4bdbb4fb1d8f73bd92681512567ac41dbb

    • SHA512

      94c6f59aefd44b30c41499d1d13ce903ebeb7e71b2358ab27dfedaf7648128d5be862c7d387210a27da7ff266bc2ba97bc4425b27d5eb2bd7a8f46d90566e389

    • SSDEEP

      1536:hTdL7hANsO6QSKM9QPigOGmPQDPKWTKZ:zLlANEfWOJ+E

    Score
    1/10
    behavioral20

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Credits.rtf

    • Size

      1KB

    • MD5

      253dae23d32a0d40e0e43f75b9eecfe8

    • SHA1

      1874105049a86a2349c9c821818f59c4ba45cbce

    • SHA256

      e4154bcb2a6d228bd9732fc06239d7f9f1db084faf8b498c79c6444161f24214

    • SHA512

      26d1b1795bd136b14ca760dcf9d8d6729fc5840c108cc19e4b5b325047a734e0df73dcb899e9276c9878718a61b91274dafe368d9b620e81c09b15646df3e8ad

    Score
    1/10
    behavioral21

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Splash/js/jquery.easing.js

    • Size

      7KB

    • MD5

      5d1439f76537cbe4784f036b47540663

    • SHA1

      16472e1bda47afd1e3202f94bb22efb384f69ea1

    • SHA256

      cda4b38b39e069aa2813486847385336d428d24a0c67734594116100328774e7

    • SHA512

      2f517118c0e09c79e8c974540991bf5393dfc9cf77a23d1f34bcd6fe5ca312655ddbeb50d0d5fbcaa47ca4475ca949af45f0bdca118b2d2b8e066adaf702df52

    • SSDEEP

      192:pA+Or8ur83V33R3hqRAsfAy45Or8ur83V33R3hqo:uZr8ur83VHBhm5r8ur83VHBhL

    Score
    1/10
    behavioral22

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Splash/js/jquery.flexslider-min.js

    • Size

      21KB

    • MD5

      9ec3c315b67f434aabc4da58eabc6c3a

    • SHA1

      51b3a7d882f438d53dc69ca5289e92254160c09a

    • SHA256

      0c853c2cc205bafe5d893017b6a03a2acf0f04a11b85f80605514cf0ae540fe6

    • SHA512

      75317411016a28dff4e7a1d68f7b604b7b08e0be90038c3039493123fe2a89ebbfc084e1e15c029cbadcb64efad2a122307957d8ba51e17ef42fff35a8a3922c

    • SSDEEP

      384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA

    Score
    1/10
    behavioral23

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Splash/js/jquery.min.js

    • Size

      90KB

    • MD5

      397754ba49e9e0cf4e7c190da78dda05

    • SHA1

      ae49e56999d82802727455f0ba83b63acd90a22b

    • SHA256

      c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

    • SHA512

      8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb

    • SSDEEP

      1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe

    Score
    1/10
    behavioral24

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/Splash/splash.html

    • Size

      6KB

    • MD5

      5a7145e33bda45cd30ab4461585df11e

    • SHA1

      745dd77dccada6a0726f1c21d146212095a74c32

    • SHA256

      bd10dd2fec52850ec495e3c480d9b9ce6cd82da94e07c130c929ce852eb047ff

    • SHA512

      cea521638af25ca70b215974cd749e3fcd1ea15a9ba54bfa7fe9ebfc689573a4e284255acd7fc7040907cd519e887f3792716d571e5663f0f097eb7dc54d5ca9

    • SSDEEP

      96:d31FT/OKTMOmAsRAlnzt4hfyG3z6ifQWUF9tLtOyw/x/T0J2rxd38xQREWJOAu:d31FLOoMOiwh49yGNf4F/LtO5x/GAu

    Score
    1/10
    behavioral25

    • Target

      Dropzone 4 4.80.4/Dropzone 4.app/Contents/Resources/libConfigurer64.dylib

    • Size

      985KB

    • MD5

      adc76beb5110b9399c529dbdec4d845e

    • SHA1

      6bf5a9949e02f149a67bb8dc8814202e6d67279d

    • SHA256

      9ec10410aa64d92e096ab5e574658cd37a3fc1f8257bd00dd861591187efa040

    • SHA512

      b26e3677ac5aec3cfd3d043c3c0ca09704759bce99b8f4b24e0c260b520748861c5b7de8ad18f2be9a92e23d79581878c3f3257a72020b46704a1dca19e56ff7

    • SSDEEP

      12288:M0izKOuHd4nLERYmKA2klySydcjoHewqGS9+:/OoJ9+

    Score
    1/10
    behavioral26

    • Target

      Dropzone 4 4.80.4/Extra/rhash

    • Size

      203KB

    • MD5

      1c3d700b96b697f6b706dee7a20f691e

    • SHA1

      a9407162477c4836ee6f9b111832075a1d530873

    • SHA256

      88f68531f38551bfbac210161bf16c1c2008092eb09eb2f89c17b7585029791b

    • SHA512

      9bb9b239c0d919cd1f9618c67363bf0b968cb1efbdfd905e803797af02ab5d1daff28d93f6fdd4904431bf4e9fd1dccd51fabb5156edee65dfa7657e767e45ff

    • SSDEEP

      3072:n7XEH9Y35a4WAAofe9hGDQ8BoB5Y9kq+QnhDHaWV8RMaNikJfY7oC:n70HYWse9Hx5Y5hDaxwkJfY7oC

    Score
    1/10
    behavioral27

    • Target

      Dropzone 4 4.80.4/Open Gatekeeper friendly

    • Size

      1KB

    • MD5

      dc9fb0fdb63b80375e7fdd5f67022847

    • SHA1

      55437344bde13777a3e309599aa6c7930721d4d7

    • SHA256

      45f8b43453cb19232902844bfde4af6471f3762880f23e968bfca28a33c26817

    • SHA512

      59f501c0b2843254f97e1c7492c295fd0cb41ca024b92cee617db471ee815aea823969381c95a7ab7a581957e2964673e3e0336ac02233d7dc0392cadae78fd7

    Score
    1/10
    behavioral28

MITRE ATT&CK Matrix

Tasks