99f7272ef3eef6ecc90417ca5b7e3561cf954d4647c077439e357263826d09e8

General

Target
SpectraInstaller.dmg
Size 862KB
Sample240603-tdf2sabe7y
SHA256 99f7272ef3eef6ecc90417ca5b7e3561cf954d4647c077439e357263826d09e8
MD5 80ee8227a44a31393bb4d0eb6545bac3
SHA1 a761729f80a63382a66986a27b21e2fd564b9b40
SHA512 dc462228f33910291eabd9bd9bc68e2aed0983cf8d5af64a7c05b28a0383866e00a7d1930251dcf8547ccd915b2f172a6ee5e0246dd200fd0c212b3783170728
SSDEEP 24576:D6D7UVoJa/0tAYXE+Yh0/fdlaKRhCkuG9:D6DI8a/PYXRYhSzaKRh1u
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  SpectraInstaller.dmg
- Size 862KB
- SHA256 99f7272ef3eef6ecc90417ca5b7e3561cf954d4647c077439e357263826d09e8
- MD5 80ee8227a44a31393bb4d0eb6545bac3
- SHA1 a761729f80a63382a66986a27b21e2fd564b9b40
- SHA512 dc462228f33910291eabd9bd9bc68e2aed0983cf8d5af64a7c05b28a0383866e00a7d1930251dcf8547ccd915b2f172a6ee5e0246dd200fd0c212b3783170728
- SSDEEP 24576:D6D7UVoJa/0tAYXE+Yh0/fdlaKRhCkuG9:D6DI8a/PYXRYhSzaKRh1u
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion execution
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  evasion
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  evasion
behavioral1
- Target
  SpectraInstaller/SpectraInstaller
- Size 431KB
- SHA256 8f49b592fdeaeb49da7b285c74ba561531a832209d4b2aa7d12ef987f88b6a08
- MD5 e2b0117383367bd6a24dd49ecd5083e3
- SHA1 7594de880ae577e742a41bc75ea1faed7342b4a5
- SHA512 979c0cfe32dd8c7ffda546a1017ca2dabb32d47aa8f565ace7f27e5c59a6ea64bac60c52d03353b61a6ccd5e70235cc7604f79f1ff7c782e843f737ee83d6a80
- SSDEEP 12288:C0IjytsGOvSOFiZIT3T27QEMFehT1R+U4lHNxY9z0C8EtJ:C1jytsxPFiZIT3MQEMFehT1R+U4lHNxc
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery evasion execution
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  evasion
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  evasion
behavioral2