Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aaa44571ba1e81142ff2d0414ef6e21160935e7f958a9588a476963a529d3f7e
Resource
macos-20240214-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adobe Genp 4.0
Resource
macos-20240214-en
0 signatures
150 seconds
General
-
Target
aaa44571ba1e81142ff2d0414ef6e21160935e7f958a9588a476963a529d3f7e
-
Size
20.7MB
-
MD5
9ee8059a55f0e6c61ae9613ec3b8ca0d
-
SHA1
11a8ff73a45321558e8620e6c25f1a5e1ce0acb4
-
SHA256
aaa44571ba1e81142ff2d0414ef6e21160935e7f958a9588a476963a529d3f7e
-
SHA512
925378950ce1a27374e1125d830e0d7e8697050797663db3385e756f5b4af1eac0a6736789035ba99f42ff72e4d4abbfe9839b9569c5f3795dea09e579b35354
-
SSDEEP
393216:mkSI2k8o0HPaM4R3fTnd4EhZrKLmY+CyjiN3UCuFGkAoHtK47syzEjverz9:f2zo8SpR3fTnd4EhZ7CyeNUxAGKiYDW
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
resource yara_rule static1/unpack001/Adobe Genp 4.0 INDICATOR_SUSPICIOUS_Binary_Embedded_Crypto_Wallet_Browser_Extension_IDs
Files
-
aaa44571ba1e81142ff2d0414ef6e21160935e7f958a9588a476963a529d3f7e.dmg macos
-
.DS_Store
-
.DS_Store:com.apple.FinderInfo
-
.background/2.png.png
-
.background/2.png:com.apple.lastuseddate#PS
-
.background/2.png:com.apple.metadata_kMDItemWhereFroms
-
.background/2.png:com.apple.quarantine
-
.fseventsd/00000000000da52d.gz
-
00000000000da52d
-
.fseventsd/00000000000da52e.gz
-
00000000000da52e
-
.fseventsd/fseventsd-uuid
-
Adobe Genp 4.0.macho macos arch:arm64 arch:x64
-
Adobe Genp 4.0:com.apple.FinderInfo
-
Adobe Genp 4.0:com.apple.ResourceFork