Resubmissions

19-07-2024 20:32

240719-zbnlqssbqf 8

13-06-2024 01:14

240613-bl1gaasdmp 8

16-04-2024 12:44

240416-pyfvasae74 7

08-03-2024 16:43

240308-t8lwhscg7x 6

17-12-2023 22:53

231217-2vb36ahfd9 6

17-12-2023 22:51

231217-2s588agbej 1

17-12-2023 22:46

231217-2p154agbdn 6

28-11-2023 22:59

231128-2yjx6sdc32 1

26-11-2023 20:50

231126-zm1qfacd3x 1

07-11-2023 20:37

231107-zelljsfh4t 1

General

  • Target

    target.ps1

  • Size

    6B

  • Sample

    240416-pyfvasae74

  • MD5

    86f3ddb420fd8cd4e5e384a9398a60ed

  • SHA1

    725352248d6cf3786bc5ee2a1923b5d276aef977

  • SHA256

    8b4747aa987fa7da30a7108189508b38b9c1728a2712ab3604e77b4787634943

  • SHA512

    1b25d77ad9e1666159674fd243d3842df84170b559ef22adc11ebc03dbd12fcd1dcc594230790c0a26590000ec45236a18c8324c70a69bf7a5eca8585679c644

Malware Config

Targets

    • Target

      target.ps1

    • Size

      6B

    • MD5

      86f3ddb420fd8cd4e5e384a9398a60ed

    • SHA1

      725352248d6cf3786bc5ee2a1923b5d276aef977

    • SHA256

      8b4747aa987fa7da30a7108189508b38b9c1728a2712ab3604e77b4787634943

    • SHA512

      1b25d77ad9e1666159674fd243d3842df84170b559ef22adc11ebc03dbd12fcd1dcc594230790c0a26590000ec45236a18c8324c70a69bf7a5eca8585679c644

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Enterprise v15

Tasks