Overview

overview

10

Static

static

1

AdobeFlashPlayer.dmg

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AdobeFlashPlayer.dmg

  • Size

    244KB

  • Sample

    240126-pr7pfafbal

  • MD5

    b2b519602673e27aa40085deb8827bd1

  • SHA1

    e827f4c1a1790c13cd761cdbf31cd2c0d7b25e55

  • SHA256

    852ff1b97c1155fc28b14f5633a17de02dcace17bdc5aadf42e2f60226479eaf

  • SHA512

    a635290927f22d4ba578d2afa05e0c27542fbdb1317e0fd829496966a315e9d16cf71302361a76d4acd2880c199bdd47eb8a10ff51b0b1a7f2cfbb6427adf029

  • SSDEEP

    6144:su9BEkqY5CT7mNuVlIbjQYUYX80t/eWiqQCBs462ftH:su9BEkZTEn8jt/biqBw2

Score
10/10
shlayeradwarediscoveryevasionmacos

Malware Config

Targets

    • Target

      AdobeFlashPlayer.dmg

    • Size

      244KB

    • MD5

      b2b519602673e27aa40085deb8827bd1

    • SHA1

      e827f4c1a1790c13cd761cdbf31cd2c0d7b25e55

    • SHA256

      852ff1b97c1155fc28b14f5633a17de02dcace17bdc5aadf42e2f60226479eaf

    • SHA512

      a635290927f22d4ba578d2afa05e0c27542fbdb1317e0fd829496966a315e9d16cf71302361a76d4acd2880c199bdd47eb8a10ff51b0b1a7f2cfbb6427adf029

    • SSDEEP

      6144:su9BEkqY5CT7mNuVlIbjQYUYX80t/eWiqQCBs462ftH:su9BEkZTEn8jt/biqBw2

    Score
    10/10
    shlayeradwarediscoveryevasion

    • Shlayer

      Shlayer family.

      adwareshlayer

    • Identifies devices as anti-VM

    • Queries the hardware information (I/O Kit registry).

      discovery

    • Queries the macOS version information.

      discovery

    • file permission

      evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks