Overview

overview

10

Static

static

10

01ca92946b...kes118

macos-10.15-amd64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01ca92946b984e0a973d3a8cce5f1f9b_JaffaCakes118

  • Size

    168KB

  • Sample

    240426-18xfksdd24

  • MD5

    01ca92946b984e0a973d3a8cce5f1f9b

  • SHA1

    daea5f452029e197cc6e853b89f6ac3198c7ee36

  • SHA256

    5105da3b225af12fb146edfd3ae1b8d4549ea4a073313ac71536ddefb667c50a

  • SHA512

    83e2d1fe9361bed897703bb6e7a9f4a33b0be08374c7f70ed512877b71af32fbfcf92b31ee39c062b583a31682f6765cb4dede50d554cb9105c9f51aa271e523

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq92k/0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestevasionexecutionmacospersistence

Malware Config

Targets

    • Target

      01ca92946b984e0a973d3a8cce5f1f9b_JaffaCakes118

    • Size

      168KB

    • MD5

      01ca92946b984e0a973d3a8cce5f1f9b

    • SHA1

      daea5f452029e197cc6e853b89f6ac3198c7ee36

    • SHA256

      5105da3b225af12fb146edfd3ae1b8d4549ea4a073313ac71536ddefb667c50a

    • SHA512

      83e2d1fe9361bed897703bb6e7a9f4a33b0be08374c7f70ed512877b71af32fbfcf92b31ee39c062b583a31682f6765cb4dede50d554cb9105c9f51aa271e523

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq92k/0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    5/10
    evasionexecutionpersistence

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

AppleScript

1
T1059.002

System Services

1
T1569

Launchctl

1
T1569.001

Persistence

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Privilege Escalation

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Defense Evasion

Hide Artifacts

1
T1564

Resource Forking

1
T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks