Overview

overview

10

Static

static

10

Sol.jar

macos-10.15-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Sol.jar

  • Size

    639KB

  • Sample

    240403-xl6h7ahf6w

  • MD5

    b269fb038ef048af12b95ffd0bcbffa3

  • SHA1

    3f8478250cf5a773228d39bbf73e5c3230e8c1fa

  • SHA256

    71e6e2fe78006f93ad62ed82871ba58542741ea0ec0d180388fc421f8f93e89d

  • SHA512

    8b27a935ed0c50a2bd7bb91545d39d66cb19e43b5b211bb15d6df8afa8b27d02dffd7a43d09b234a2f473191fee40a0a7c8073e38e90156d5f07ae81546c72b4

  • SSDEEP

    12288:nXtsQm/Gsm5YD4f4s4njgs/RRr+9S2N+ZTggNKRcd3mus2xESprDYHJ:nXOQq65c4wzjgsTKD+Z02PmuRxXprDYp

Score
10/10
adwindevasionexecutionmacos

Malware Config

Targets

    • Target

      Sol.jar

    • Size

      639KB

    • MD5

      b269fb038ef048af12b95ffd0bcbffa3

    • SHA1

      3f8478250cf5a773228d39bbf73e5c3230e8c1fa

    • SHA256

      71e6e2fe78006f93ad62ed82871ba58542741ea0ec0d180388fc421f8f93e89d

    • SHA512

      8b27a935ed0c50a2bd7bb91545d39d66cb19e43b5b211bb15d6df8afa8b27d02dffd7a43d09b234a2f473191fee40a0a7c8073e38e90156d5f07ae81546c72b4

    • SSDEEP

      12288:nXtsQm/Gsm5YD4f4s4njgs/RRr+9S2N+ZTggNKRcd3mus2xESprDYHJ:nXOQq65c4wzjgsTKD+Z02PmuRxXprDYp

    Score
    6/10
    evasionexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

JavaScript

1
T1059.007

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1
T1564

Resource Forking

1
T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks