General

  • Target

    MacSploit.zip

  • Size

    3.1MB

  • Sample

    240221-bsyw2ahe78

  • MD5

    49d83c13744de51bfc4f965d2345e491

  • SHA1

    6da94b6b69970e0879cf329a90cb461be8fcdd73

  • SHA256

    9d7b0433d3a3a38d9e5bc3f0938ddfef48a886b51757d39099f0ee78b50d4faf

  • SHA512

    2c2f6407b2ef8138f70c35e9d0bfd6e8e31523d24b6f95c2a3d48286f3e00fc00337a5e54ece225b0071fc7ac110988293f244b84979b0160dc23836714cbeaf

  • SSDEEP

    98304:5yLfRYSSxyTQpnmlw5lqhbeStY5Bf++CLRo9:4fRYlyMmlwvqg6Y7XC0

Score
6/10

Malware Config

Targets

    • Target

      MacSploit.zip

    • Size

      3.1MB

    • MD5

      49d83c13744de51bfc4f965d2345e491

    • SHA1

      6da94b6b69970e0879cf329a90cb461be8fcdd73

    • SHA256

      9d7b0433d3a3a38d9e5bc3f0938ddfef48a886b51757d39099f0ee78b50d4faf

    • SHA512

      2c2f6407b2ef8138f70c35e9d0bfd6e8e31523d24b6f95c2a3d48286f3e00fc00337a5e54ece225b0071fc7ac110988293f244b84979b0160dc23836714cbeaf

    • SSDEEP

      98304:5yLfRYSSxyTQpnmlw5lqhbeStY5Bf++CLRo9:4fRYlyMmlwvqg6Y7XC0

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks