Overview

overview

1

Static

static

1

1b5627cb02...e9.bin

macos-10.15-amd64

1

OBSBOT Cen....dylib

macos-10.15-amd64

1

OBSBOT Cen....mcext

macos-10.15-amd64

1

OBSBOT Cen...Center

macos-10.15-amd64

1

OBSBOT Cen...eg-mux

macos-10.15-amd64

1

OBSBOT Cen...g-tool

macos-10.15-amd64

1

OBSBOT Cen...dge.js

windows7-x64

1

OBSBOT Cen...dge.js

windows10-2004-x64

1

OBSBOT Cen...ior.js

windows7-x64

1

OBSBOT Cen...ior.js

windows10-2004-x64

1

OBSBOT Cen...dio.js

windows7-x64

1

OBSBOT Cen...dio.js

windows10-2004-x64

1

OBSBOT Cen...ter.js

windows7-x64

1

OBSBOT Cen...ter.js

windows10-2004-x64

1

OBSBOT Cen...ter.js

windows7-x64

1

OBSBOT Cen...ter.js

windows10-2004-x64

1

OBSBOT Cen...ipt.js

windows7-x64

1

OBSBOT Cen...ipt.js

windows10-2004-x64

1

OBSBOT Cen...ipt.js

windows7-x64

1

OBSBOT Cen...ipt.js

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b5627cb025619f3c739945f40a73ee9.bin

  • Size

    164.9MB

  • Sample

    240218-bncs1acg84

  • MD5

    1b5627cb025619f3c739945f40a73ee9

  • SHA1

    0884c91bedb9cbee1af5283b6355fa80eb7f4495

  • SHA256

    d0b55043f0133572c2fa06595ff7c37cc90d7cccf3b3c26dde5955f6b77bdfd5

  • SHA512

    1317affb558ec1f0dd1802f57832679bd9af8ad15bdd75562516751ef6c08830eddc83f687084418e8e3ece1e878ba656da2dfee894f9ce87eafa43af8fe447b

  • SSDEEP

    3145728:GMMKSIL1Q6ilf1djxzdPFvzmuc1F7rl5xunvdaBKHTMZLqBRz/RIpB3aX/ur8oBY:GFKSe1li1rjxBPtw7rKdgKHiuypB3Q/F

Score
1/10
macos

Malware Config

Targets

    • Target

      1b5627cb025619f3c739945f40a73ee9.bin

    • Size

      164.9MB

    • MD5

      1b5627cb025619f3c739945f40a73ee9

    • SHA1

      0884c91bedb9cbee1af5283b6355fa80eb7f4495

    • SHA256

      d0b55043f0133572c2fa06595ff7c37cc90d7cccf3b3c26dde5955f6b77bdfd5

    • SHA512

      1317affb558ec1f0dd1802f57832679bd9af8ad15bdd75562516751ef6c08830eddc83f687084418e8e3ece1e878ba656da2dfee894f9ce87eafa43af8fe447b

    • SSDEEP

      3145728:GMMKSIL1Q6ilf1djxzdPFvzmuc1F7rl5xunvdaBKHTMZLqBRz/RIpB3aX/ur8oBY:GFKSe1li1rjxBPtw7rKdgKHiuypB3Q/F

    Score
    1/10
    behavioral1

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Frameworks/libavcodec.59.37.100.dylib

    • Size

      28.6MB

    • MD5

      f475e1c8fd201db07bc0c17cc33de351

    • SHA1

      957ed38707f77d7d73a5a2220a520fb2afa7d33c

    • SHA256

      8614c3b0999ef5cbd65ec8ac4b308433c78b1a2c99144ccd9bb2da04107b8f76

    • SHA512

      b191e8372944178eeb939c596d6f4f3fe917ff9e2b2d10a547ccf2d4d95d39fce91e60c8a6404c886999652f6c5023a46d29f4bc790884f7e0b8d0fff7300317

    • SSDEEP

      786432:lO37wMX1oWkPp4AcYvpPawgRusl29377cEbs8LO:krwUAcYVdJn

    Score
    1/10
    behavioral2

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Library/SystemExtensions/com.obsbot.OBSBOT_Center.mcext.systemextension/Contents/MacOS/com.obsbot.OBSBOT_Center.mcext

    • Size

      164KB

    • MD5

      cc13d4a5b81bf9ab528c37e8a3725829

    • SHA1

      f2bacc60e446ff421104c571b7ad3c9d90115991

    • SHA256

      054a8ea8aeca5692eeccb8cd17ac6c460ee140fca68bc94e9283551a62729b15

    • SHA512

      3877c8e37ae2e171180a26e8cf2f357f8abf6a25757ed7cbe09f8829616bac1d99a6dc695e2441a66b3baadc9226903386031bf21fbb916ab1c3e8ce0565fbb4

    • SSDEEP

      1536:HAS+oKhK44FLQilIUvv9Gv22QoYw28d3aCYsBGDugQJOmFT+2zPAcApNWV/2rNLK:gRoKL4JRn1xVwpJF/zPyrJ

    Score
    1/10
    behavioral3

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/MacOS/OBSBOT_Center

    • Size

      7.9MB

    • MD5

      83f233fef1b6049d7598e48fd744516b

    • SHA1

      67e407ced873d6a98e9f7de4099b994de82b7ae5

    • SHA256

      43d11faa6bf64d7d000c292305b8039d8a5ab805c41b7deb0b6b81dffd3becc0

    • SHA512

      6cddb08adf989684877335118ae1302ea9dcf1251a0294187539e17bd9e53c4e7ac5b4faf1a02f0f8b9ba8bada5906719afb34b859b57c78067dd1134a4ca642

    • SSDEEP

      98304:114lo107nONZ0CQowQ34Z38Oog8RBnTVNQs3WvArEqi6c60aAE6GLuQOl7YS07KE:1qlo1jg3IjkArEqib60ab6z0X

    Score
    1/10
    behavioral4

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/MacOS/ffmpeg-mux

    • Size

      88KB

    • MD5

      5dfa2b7941861952c5d6459403d0b2a8

    • SHA1

      659e6f4eb050f5fde29f67e59adb794e7aef466a

    • SHA256

      07c7b96f5d1be2647edb2335285c6b9dd17c9d28ac0ab27b7611a98053ee172f

    • SHA512

      e74619b2d3a500ebf0d4bb407bf93f5522198318a8b0214a76107b873498ce2a321d750f51ab123da3a4814028d083962d71d31537dfc5d14f546d560e1469a1

    • SSDEEP

      384:omDIHA6E1xjn6vdJBkcwZDftEodD4IzlmIJr+Q8xr4XrarWHHSrNab8ermvr:o2Y1EONkvDOopzF8G0ab85

    Score
    1/10
    behavioral5

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/MacOS/ffmpeg-tool

    • Size

      279KB

    • MD5

      78f325b26ff6bfd9ff7816c774473fee

    • SHA1

      ef83459c2540af17ff1b1a23e4610d640953f810

    • SHA256

      6d07150381356aa5dbe3637ea66533b88229940899d711aa2bd00e6ab52d7c85

    • SHA512

      c54772efb1e1d4e5688c5557bc3b242e6882181cfe2bb903fbbea71d91c75d38497423a0d96c16838603980fe41b90dc59cb94c6f5fbf40c7e8cdbcf88d1d816

    • SSDEEP

      6144:GS42FsANN7QfdHdAKKvYyxYMx5M2kq3U6U7cikSK51q:GS4hANN72AKKvTYMxS2xU60kzv

    Score
    1/10
    behavioral6

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/LightCore.bundle/js/AEJSBridge.js

    • Size

      25KB

    • MD5

      0ddadb0f6f51cd3c53a3853ea8322f13

    • SHA1

      783747da23df766f6f983505d2ad5ee3cea290a1

    • SHA256

      2d0bdb18245851be02d15b0c87c5f8659bcc0165649b8c7b6ba701b0427568f5

    • SHA512

      5ed0b523d965fc9ae2c0d96a6ed884c5d12462f13acd47fc81070a1714556e068008059f3a8dc427fdf8cdc7b2775aec16e9a8de2ec0e175e1a004f1cd93724c

    • SSDEEP

      192:eM6VQ8by6pzXkIRDtCyKZa25g/Q7H5yiQS8jLgiJU6Vz0fOin3AxXAAtN36c1GS9:eMy100//rXxVsbVgqByKPW2aiBV76

    Score
    1/10
    behavioral7behavioral8

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/LightCore.bundle/js/DynamicBehavior.js

    • Size

      3KB

    • MD5

      5c9a6b68071dd11f6d4ce11784886d63

    • SHA1

      c861f0a8a2be6b1972c0ad6a7dc0b32afda62efb

    • SHA256

      7bf1d3c2e8b876251a5bd798ce3a836bbff0231fcf69a9d1bd688d13fbcc9972

    • SHA512

      1c0f5cd1255615199515a3845e0d2ce8204db58ccba40fbd4d589ee26fcb85e7c0543f684aae2cdb4609bffb74444f57501cdbcdbbc0d51b7ab8b78970273098

    Score
    1/10
    behavioral10behavioral9

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/LightCore.bundle/js/JSAudio.js

    • Size

      6KB

    • MD5

      d5ca294d961be6ee75725ff84aea55f5

    • SHA1

      1a5c4132d2c1cb51260182c80847205c2b927465

    • SHA256

      6b2fef3ca0a4efc07e5fec00977f3f61d99cb314e126d8b02836c4c3564aa231

    • SHA512

      22e8ad393d6e6844c02d6d869418c80a9ed712eb7ae8e30d1db25108f92920e09e8a2f0b81d982c813e6b820b4a32da0a5826d9ed4c21c5726968c33fd35594a

    • SSDEEP

      96:kP3oVOyue60oUpC5JOlz7wfXXD4ZOZDcUZCZXpAO8RP03s4ypGK5:y3sk0g5JOBcOnsOG

    Score
    1/10
    behavioral11behavioral12

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/LightCore.bundle/js/JSCallbackRegister.js

    • Size

      5KB

    • MD5

      848082831795266a77ca5aa9f4576714

    • SHA1

      2282213952bd3158f46de98d58090ed756a9af86

    • SHA256

      e818d41479e68828770b6086fa45e86d20549cd579d4a699503ee1e976a9c3bc

    • SHA512

      187f1ff2cb55f034339d9051b4d85b678d290fc228a978abae3fb5f112a1a3aefcaf6e382dbff155bbe22a4f32bb9526aee23ca77c40449f2d99b263e1410930

    • SSDEEP

      96:GBgl0LK5C3tC3CtyoC7L1UTt7spLn9pEKN+pEbXH1hIXy0QlxfKXO/eY1vM1j9ry:GBc0LKY30ytyl7LKR7spLn9pEKN+pQXr

    Score
    1/10
    behavioral13behavioral14

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/LightCore.bundle/js/JSDOMAdapter.js

    • Size

      15KB

    • MD5

      fa67aa0645764bd871e6ddfb28ed4cec

    • SHA1

      16936acd58dc16df90fe6ef2dcce75ba0103a589

    • SHA256

      ad17f95625ed066f062a0cc02e05fcd03b59c6031e50bf46819510b935907a5c

    • SHA512

      f2c2185dddb23476cec346c137ab9d06fe217c98f96cc99b75a311a643c6843068773886bfebbe28206d016d0d40e0b86312fbd0e025aee69bf83770202f2cb9

    • SSDEEP

      384:pHn/XmWmSmC1wm+mDm/mtmCJJCRae85GCPUo:V/XmWmSmswm+mDm/mtmWJCceoGyUo

    Score
    1/10
    behavioral15behavioral16

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/segmentMotionRes.bundle/video_greenscreen/script.js

    • Size

      2KB

    • MD5

      b390d519379485349cd104f02b4ed33c

    • SHA1

      a659984b63334e369037e949f71c747cec97cfe2

    • SHA256

      11c9e2dfaf382a33b5c4b1a2d36c3bc2561525ae44ee6c5ba0c3a0afe64af7f0

    • SHA512

      d5a134e6ce94dce9e1bc89dd81a3d6890c783b4ce42febd5f467d4675546b32a1ed54c77bd432189b9aa778b7474a2d2b9942823381f3351801fa1eb6624e64d

    Score
    1/10
    behavioral17behavioral18

    • Target

      OBSBOT Center/OBSBOT_Center.app/Contents/Resources/segmentMotionRes.bundle/video_segmentation_blur/script.js

    • Size

      2KB

    • MD5

      213a6286ed876e44ac1fe19a939159e3

    • SHA1

      d19f19caa414f8bd4a6db858ce08915e8e55cf47

    • SHA256

      89a5abcb0990c6d96627fae97964a6c0132f2e30de45a1a4b95b55ba45b34891

    • SHA512

      c1b4381ba823e5a64f099bd34460271d1e9e2b07adf100017eeb8ae4702cb8b3e6d4b3f7d67b29305207ddb88c675d5cb031bde6cccc8a738cb165719c0e2db0

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks