c9d77a8375af041f4dfa0ac1dfeef5dbea6dc98772fe2c2386f2281da26cc7c7 | Triage

Resubmissions

07/05/2024, 07:58

240507-jtt88sff6z 5

07/05/2024, 07:54

240507-jr263afe81 5

07/05/2024, 07:19

240507-h5hh5shd75 6

Sharing

General

Target

Pindanoten.docx
Size

16KB
Sample

240507-jr263afe81
MD5

e31f66b3181378d484e6c915285f2096
SHA1

640043b5ef2d2e698257d68b222fad7ea122a0f9
SHA256

c9d77a8375af041f4dfa0ac1dfeef5dbea6dc98772fe2c2386f2281da26cc7c7
SHA512

336f02c763cedafa47116fba2e8c49c62a4f6f1b008378d233d2457eff13df2f42c4d5baf6c153a5830a6e48c94006570861db710a4efcb02a3c729c15b8c09c
SSDEEP

384:dthz+09s3LGqiCIQuog46c7OMHhHML8DejstL4KvIvK:toLbibQuk7OMNNXtB

Score

5^/10

evasion execution macos persistence

Malware Config

Targets

- Target
  
  Pindanoten.docx
- Size
  
  16KB
- MD5
  
  e31f66b3181378d484e6c915285f2096
- SHA1
  
  640043b5ef2d2e698257d68b222fad7ea122a0f9
- SHA256
  
  c9d77a8375af041f4dfa0ac1dfeef5dbea6dc98772fe2c2386f2281da26cc7c7
- SHA512
  
  336f02c763cedafa47116fba2e8c49c62a4f6f1b008378d233d2457eff13df2f42c4d5baf6c153a5830a6e48c94006570861db710a4efcb02a3c729c15b8c09c
- SSDEEP
  
  384:dthz+09s3LGqiCIQuog46c7OMHhHML8DejstL4KvIvK:toLbibQuk7OMNNXtB
Score

5^/10

evasion execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionexecutionpersistence