Overview

overview

10

Static

static

10

Rar.jar

macos-10.15-amd64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rar.jar

  • Size

    639KB

  • Sample

    240429-yj1etsbe5w

  • MD5

    d850fd9808fcf877744ef20cf3fd3159

  • SHA1

    c90f12bf81f662786c04d0bc6245db75f5338e36

  • SHA256

    0d1a07ed9026aa90b6cada23ea05cf5826962597159dbbd6bfd7b4c7e04da059

  • SHA512

    c957f8cf529d350872565937071532a51dc0dbef4031135847200d7059221fd5e0c561a5a8a31cebbc14834fe1d3b06e68c9d3490d1c3d4e392aa1959fdb36de

  • SSDEEP

    12288:arDlQl/PPRwvh4JNQpADgK/PRz+BX8N+/2g6liR5A3EuI2FYS+dD0j:ar5QVRwJ4LbDgKR+u+//MpEulFj+dD0j

Score
10/10
adwindevasionexecutionmacos

Malware Config

Targets

    • Target

      Rar.jar

    • Size

      639KB

    • MD5

      d850fd9808fcf877744ef20cf3fd3159

    • SHA1

      c90f12bf81f662786c04d0bc6245db75f5338e36

    • SHA256

      0d1a07ed9026aa90b6cada23ea05cf5826962597159dbbd6bfd7b4c7e04da059

    • SHA512

      c957f8cf529d350872565937071532a51dc0dbef4031135847200d7059221fd5e0c561a5a8a31cebbc14834fe1d3b06e68c9d3490d1c3d4e392aa1959fdb36de

    • SSDEEP

      12288:arDlQl/PPRwvh4JNQpADgK/PRz+BX8N+/2g6liR5A3EuI2FYS+dD0j:ar5QVRwJ4LbDgKR+u+//MpEulFj+dD0j

    Score
    4/10
    evasionexecution
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

JavaScript

1
T1059.007

System Services

1
T1569

Launchctl

1
T1569.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1
T1564

Resource Forking

1
T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks