aef430279bd44d4b768cd482e24b6bc78a813ae390dcab86d87d10da852ffcc2 | Triage

Sharing

General

Target

AdobeFlashPlayerInstaller.dmg
Size

1.7MB
Sample

240117-zm9ncaedap
MD5

382fb9ccbd87999e8e6d924bc365be29
SHA1

95630e78042c7f2509abe40a395cac9d245aeb09
SHA256

aef430279bd44d4b768cd482e24b6bc78a813ae390dcab86d87d10da852ffcc2
SHA512

7ac0f5f918a4479f569fdb7fd48289f5d95b1ebe1dd86c98893061f2fd7f6ffd176a826c39ac91b6aa4fd90ac856b3207abeac140463d0515e683610c0ab1045
SSDEEP

24576:ciPQQl3m7Ud0W3qTZXZ9kSksCJs3+xthxWXCsByf1ffM0BFLL8xyVTqeq/Na5WtD:zoMqZZ9DkLJ4+xsysB6ftBFv51UnD

Score

8^/10

discovery evasion macos

Malware Config

Targets

- Target
  
  AdobeFlashPlayerInstaller.dmg
- Size
  
  1.7MB
- MD5
  
  382fb9ccbd87999e8e6d924bc365be29
- SHA1
  
  95630e78042c7f2509abe40a395cac9d245aeb09
- SHA256
  
  aef430279bd44d4b768cd482e24b6bc78a813ae390dcab86d87d10da852ffcc2
- SHA512
  
  7ac0f5f918a4479f569fdb7fd48289f5d95b1ebe1dd86c98893061f2fd7f6ffd176a826c39ac91b6aa4fd90ac856b3207abeac140463d0515e683610c0ab1045
- SSDEEP
  
  24576:ciPQQl3m7Ud0W3qTZXZ9kSksCJs3+xthxWXCsByf1ffM0BFLL8xyVTqeq/Na5WtD:zoMqZZ9DkLJ4+xsysB6ftBFv51UnD
Score

8^/10

discovery evasion
- Identifies devices as anti-VM
- Queries the hardware information (I/O Kit registry).
  discovery
- Queries the macOS version information.
  discovery
- file permission
  evasion
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Unix Shell

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Linux and Mac File and Directory Permissions Modification

Credential Access

Discovery

File and Directory Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion