Overview

overview

10

Static

static

10

03d87d25d0...kes118

macos-10.15-amd64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03d87d25d0492244741f4a4f23212560_JaffaCakes118

  • Size

    168KB

  • Sample

    240427-276hjaag24

  • MD5

    03d87d25d0492244741f4a4f23212560

  • SHA1

    aa042229ad96b01552c8b738eb5641edeabf4ce4

  • SHA256

    7a31583c2517e637f60d11dd1bdc117d31549a36bbf14df46a08c7ced80e8341

  • SHA512

    739b3be82f4a2fdb01b7921aa3bfbe9b8869e7f6a5bb6d8c08ff8027814d2a797352e0643068f2c91e779a2a65e24003dc3e31e21c6fe4410854b5aabde34a62

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9CXL0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestexecutionmacospersistence

Malware Config

Targets

    • Target

      03d87d25d0492244741f4a4f23212560_JaffaCakes118

    • Size

      168KB

    • MD5

      03d87d25d0492244741f4a4f23212560

    • SHA1

      aa042229ad96b01552c8b738eb5641edeabf4ce4

    • SHA256

      7a31583c2517e637f60d11dd1bdc117d31549a36bbf14df46a08c7ced80e8341

    • SHA512

      739b3be82f4a2fdb01b7921aa3bfbe9b8869e7f6a5bb6d8c08ff8027814d2a797352e0643068f2c91e779a2a65e24003dc3e31e21c6fe4410854b5aabde34a62

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9CXL0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    5/10
    executionpersistence

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks