General
-
Target
henry
-
Size
370KB
-
MD5
973225dc83f568ef6208d49fe2648fc0
-
SHA1
e68bfa72a4b4289a4cc688e81f9282b1f78ebc1f
-
SHA256
927b3564c1cf884d2a05e1d7bd24362ce8563a1e9b85be776190ab7f8af192f6
-
SHA512
f0bc8f32c3ce1a9c642b7066f0d638ec31e86715b15c4af0811ef55814e7a7793255e9148a01683b1e218dc9ccabedf2c9545b55c8882cb710210ca5602f5f75
-
SSDEEP
6144:Qj1EoCdZ9529GCfBDYYZ805M2hHskQDipw:QBEoO2/0ipw
Score
10/10
Malware Config
Signatures
-
Detect KandyKorn payload 1 IoCs
resource yara_rule sample family_kandykorn -
Kandykorn family
Files
-
henry.bundle macos arch:x64