3dd343e43522943ef2989bc3137bf983a555b5177502168bf9c3a5516ba8b72e

General

Target
Setup.dmg
Size 1.4MB
Sample240324-llql7aeb7y
SHA256 3dd343e43522943ef2989bc3137bf983a555b5177502168bf9c3a5516ba8b72e
MD5 ae7228fa5539d9718f69d83b21a6c164
SHA1 99080ce92d5e154bbd9b833ee48028eef7a19e85
SHA512 717cc33e7ee01821a2b43ec05af9293fd2cc1c57cc9b188055c157ba8a7fbe61f26d5f13c32755eb90dd4cf056eb7770e2cf45177820b22eab8ecc44ea0c24a8
SSDEEP 24576:5MThLjLMtvFBPAt8muL5w6osPL653JLJSfEAaLmgw04/5BnCAZhvE/qgeRD9:5MThL8LYWL5w6W5suLmgw51CAZhMfUD
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  Setup.dmg
- Size 1.4MB
- SHA256 3dd343e43522943ef2989bc3137bf983a555b5177502168bf9c3a5516ba8b72e
- MD5 ae7228fa5539d9718f69d83b21a6c164
- SHA1 99080ce92d5e154bbd9b833ee48028eef7a19e85
- SHA512 717cc33e7ee01821a2b43ec05af9293fd2cc1c57cc9b188055c157ba8a7fbe61f26d5f13c32755eb90dd4cf056eb7770e2cf45177820b22eab8ecc44ea0c24a8
- SSDEEP 24576:5MThLjLMtvFBPAt8muL5w6osPL653JLJSfEAaLmgw04/5BnCAZhvE/qgeRD9:5MThL8LYWL5w6W5suLmgw51CAZhMfUD
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion execution
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  evasion
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  evasion
behavioral1
- Target
  Setup/Setup
- Size 368KB
- SHA256 3dd2d9234189b014b6a5a598f2016024039dcd4693f8959d5bf283293c1fd987
- MD5 213f663efa74ab5d4ceb3b5774106a76
- SHA1 5819f9b7cf925d1148594b3c1faae75cdd0ea6e3
- SHA512 2eddc8b740787dbc7e5599a940d5d7b1f8d3d62e1409fcfbf748960b6fe56282d8cc4c12ad6b8df1cf3717253d114b53f78ea05713ca405ba0563270adef7c55
- SSDEEP 6144:fdG6yZ+j3v6I29v/2YOnN/++OQeQ9fzrZ6HH+A4N8klhZ7StKsuqeIqr9LKBdoCg:fdHB6IbDnN/++OQeQ9fzrZ6HH+A4N8kX
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion execution
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  evasion
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  evasion
behavioral2