Overview

overview

10

Static

static

10

0384c8a0b9...kes118

macos-10.15-amd64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0384c8a0b998e8bb1f4585c61b17f9a1_JaffaCakes118

  • Size

    168KB

  • Sample

    240427-yslm2afg4v

  • MD5

    0384c8a0b998e8bb1f4585c61b17f9a1

  • SHA1

    a647f97d2e09b96fc2bccfacb0878423102f6a1e

  • SHA256

    0959f724d26aa9adcf69c10c159b5e989ec34c7e7d7cce5253012fa9b8576ff6

  • SHA512

    434c118bacdd8c6db7c996eaee38ac446b417edbf3df197ce1dbfdd7e8db53d8d04aef29ec8741fa8b978c8f193c66ac833714bf51f9353a197a65e650e4d383

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq970:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestexecutionmacospersistence

Malware Config

Targets

    • Target

      0384c8a0b998e8bb1f4585c61b17f9a1_JaffaCakes118

    • Size

      168KB

    • MD5

      0384c8a0b998e8bb1f4585c61b17f9a1

    • SHA1

      a647f97d2e09b96fc2bccfacb0878423102f6a1e

    • SHA256

      0959f724d26aa9adcf69c10c159b5e989ec34c7e7d7cce5253012fa9b8576ff6

    • SHA512

      434c118bacdd8c6db7c996eaee38ac446b417edbf3df197ce1dbfdd7e8db53d8d04aef29ec8741fa8b978c8f193c66ac833714bf51f9353a197a65e650e4d383

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq970:5SeOQdaZNxtk8cqhSxvHY9

    Score
    5/10
    executionpersistence

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks