Behavioral task
behavioral1
Sample
544891c71c30ab4d883f0548a17891aed1b33fcd6e423da8c20d1ce8a3161aff
Resource
macos-20240214-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
544891c71c30ab4d883f0548a17891aed1b33fcd6e423da8c20d1ce8a3161aff
-
Size
346KB
-
MD5
015c5d12273dde42fd0a17985ee9a1cd
-
SHA1
ce3705baf097cd95f8f696f330372dd00996d29a
-
SHA256
544891c71c30ab4d883f0548a17891aed1b33fcd6e423da8c20d1ce8a3161aff
-
SHA512
5d10c0868eb75d5729564f22fc3f7977980b56ce700ec03cadcd9a5340e2732250bcb7d5d05307e974aac7d5e9aea8edfa5f8294ae89d4ebae64d53b516104ff
-
SSDEEP
3072:3SZzeJF/QjZ4QLFQD/UH50YNi1wA0zJDzIn89N+49H7OyDKgw5S41JAjPg3eL0Ac:iHrNdVzs0f7+5SqwXkM1u0ikbZBw
Score
10/10
Malware Config
Signatures
-
Detect KandyKorn payload 1 IoCs
Processes:
resource yara_rule sample family_kandykorn -
Kandykorn family
Files
-
544891c71c30ab4d883f0548a17891aed1b33fcd6e423da8c20d1ce8a3161aff.macho macos arch:arm64