8b088badde6fd826f52f1946ab552af1d1a4bd636e40da47a953913a6dc9be0f

Analysis

max time kernel
253s
max time network
285s
platform
macos-10.15_amd64
resource
macos-20240611-en
resource tags

arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
21/06/2024, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rat.jar
Size 639KB
Sample240621-txchpsxeqc
SHA256 8b088badde6fd826f52f1946ab552af1d1a4bd636e40da47a953913a6dc9be0f
MD5 5989a9e7c8f374be58db682c13d3469d
SHA1 6c0297b8cccb6bd5b16c385bdd6aedae5e616597
SHA512 d7a19b4dc45be0a5649fe097f7516952cd67c03b318c841d0606b7f434ccd7f0b896b5dce9f53f6a1e6f830f9c01d38f7f3d22472b36b84b93996c070b0ecfaa
SSDEEP 12288:yn7BQt/LTFQXp4FhQJkvgi/HR7+hPoNaDOguV2RFE3YuQ2hcSypDwg:yntQtdQZ4nDvgiZ2yaD341Yu9hfypDwg
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

evasion execution

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs

Web Service

T1102

flow	ioc
31	0.tcp.eu.ngrok.io
47	0.tcp.eu.ngrok.io
381	0.tcp.eu.ngrok.io
12	0.tcp.eu.ngrok.io
13	0.tcp.eu.ngrok.io

JavaScript 1 TTPs 1 IoCs

Adversaries may abuse various implementations of JavaScript for execution.

execution

JavaScript

T1059.007

ioc	Process
"/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/rat.jar	Process not Found

Resource Forking 1 TTPs 6 IoCs

Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

evasion

Resource Forking

T1564.009

ioc	Process
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool	Process not Found
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck	Process not Found
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref	Process not Found
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool	Process not Found
/System/Library/PreferencePanes/DesktopScreenEffectsPref.prefPane/Contents/Resources/DesktopPictures.prefPane/Contents/XPCServices/com.apple.preference.desktopscreeneffect.desktop.remoteservice.xpc/Contents/MacOS/com.apple.preference.desktopscreeneffect.desktop.remoteservice	Process not Found
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool	Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"open /Users/run/rat.jar\""
1⤵
PID:493

/bin/bash
sh -c "sudo /bin/zsh -c \"open /Users/run/rat.jar\""
1⤵
PID:493

/usr/bin/sudo
sudo /bin/zsh -c "open /Users/run/rat.jar"
1⤵
PID:493
- /bin/zsh
  /bin/zsh -c "open /Users/run/rat.jar"
  2⤵
  PID:495
- /usr/bin/open
  open /Users/run/rat.jar
  2⤵
  PID:495

/usr/libexec/xpcproxy
xpcproxy com.apple.JarLauncher.1532
1⤵
PID:498

/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher
"/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher"
1⤵
PID:498
- /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
  "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/rat.jar
  2⤵
  PID:502

/usr/libexec/xpcproxy
xpcproxy com.apple.pluginkit.pkd
1⤵
PID:499

/usr/libexec/pkd
/usr/libexec/pkd
1⤵
PID:499

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:501

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:522

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:522

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:524

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:524

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:526

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:526

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:527

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:527

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:528

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:528

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:536

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdater0B4C966A/OneDrive.app
1⤵
PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.systempreferences.2140
1⤵
PID:547

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences
"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
1⤵
PID:547

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountProfileRemoteViewService 547
1⤵
PID:548

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
1⤵
PID:548

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
1⤵
PID:550

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
1⤵
PID:551

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
1⤵
PID:552

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
1⤵
PID:553

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
1⤵
PID:554

/usr/libexec/xpcproxy
xpcproxy com.apple.nfcd
1⤵
PID:555

/usr/libexec/nfcd
/usr/libexec/nfcd
1⤵
PID:555

/usr/libexec/xpcproxy
xpcproxy com.apple.studentd
1⤵
PID:556

/usr/libexec/studentd
/usr/libexec/studentd
1⤵
PID:556

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:558

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:558

/usr/libexec/xpcproxy
xpcproxy com.apple.bird
1⤵
PID:563

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:564

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
1⤵
PID:563

/usr/libexec/xpcproxy
xpcproxy com.apple.preference.desktopscreeneffect.desktop.remoteservice 547
1⤵
PID:578

/System/Library/PreferencePanes/DesktopScreenEffectsPref.prefPane/Contents/Resources/DesktopPictures.prefPane/Contents/XPCServices/com.apple.preference.desktopscreeneffect.desktop.remoteservice.xpc/Contents/MacOS/com.apple.preference.desktopscreeneffect.desktop.remoteservice
/System/Library/PreferencePanes/DesktopScreenEffectsPref.prefPane/Contents/Resources/DesktopPictures.prefPane/Contents/XPCServices/com.apple.preference.desktopscreeneffect.desktop.remoteservice.xpc/Contents/MacOS/com.apple.preference.desktopscreeneffect.desktop.remoteservice
1⤵
PID:578

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:579

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:580

/usr/libexec/xpcproxy
xpcproxy com.apple.coremedia.videodecoder 578
1⤵
PID:581

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
1⤵
PID:581

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:582

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:582

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:583

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:583

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportCrash.Root
1⤵
PID:584

/System/Library/CoreServices/ReportCrash
/System/Library/CoreServices/ReportCrash daemon
1⤵
PID:584

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:585

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:585

/usr/libexec/xpcproxy
xpcproxy com.apple.coremedia.videodecoder 285
1⤵
PID:586

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
1⤵
PID:586

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.openAndSavePanelService 578
1⤵
PID:587

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
1⤵
PID:587

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.QuickLookUIService 587
1⤵
PID:588

/System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.framework/Versions/A/XPCServices/QuickLookUIService.xpc/Contents/MacOS/QuickLookUIService
/System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.framework/Versions/A/XPCServices/QuickLookUIService.xpc/Contents/MacOS/QuickLookUIService
1⤵
PID:588

/usr/libexec/xpcproxy
xpcproxy com.apple.automountd
1⤵
PID:589

/usr/libexec/automountd
automountd
1⤵
PID:589
- /usr/libexec/od_user_homes
  /usr/libexec/od_user_homes .localized
  2⤵
  PID:590

/usr/libexec/xpcproxy
xpcproxy com.apple.TextInputMenuAgent
1⤵
PID:591

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
1⤵
PID:591

/usr/libexec/xpcproxy
xpcproxy com.apple.TextInputSwitcher
1⤵
PID:592

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
1⤵
PID:592

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.1864
1⤵
PID:593

/System/Applications/Maps.app/Contents/MacOS/Maps
/System/Applications/Maps.app/Contents/MacOS/Maps
1⤵
PID:593

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:594

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:594

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:595

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:595

/usr/libexec/xpcproxy
xpcproxy com.apple.WeatherService
1⤵
PID:596

/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
1⤵
PID:596

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreLocationAgent
1⤵
PID:597

/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent
/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent
1⤵
PID:597

/bin/sh
sh -c /usr/sbin/kextstat
1⤵
PID:600

/bin/bash
sh -c /usr/sbin/kextstat
1⤵
PID:600

/usr/sbin/kextstat
/usr/sbin/kextstat
1⤵
PID:600

/bin/sh
sh -c /usr/sbin/kextstat
1⤵
PID:602

/bin/bash
sh -c /usr/sbin/kextstat
1⤵
PID:602

/usr/sbin/kextstat
/usr/sbin/kextstat
1⤵
PID:602

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:603

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:603

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:604

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GeoBookmarks.plist

Path /Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoBookmarks.plist
Size 88B
SHA256 cd3a65a738c66abb558545cea94329fd7d882f1f4877cea4a5af32d024dbbce3
MD5 44d48b8856347f58f97ffd5efbf6fb52
SHA1 749ac5298ea842c613f3748abe9e488bfdf4b382
SHA512 974fc97ed31ccbc19dc976128a41f1fa032e353fdb8cf1e9b7b7f07134c022e01451f7ceb07f91b0ac4b6d97bc320224a2edd471d3e44f5ab5359f41584a8a50
MD5 SHA1 SHA512

Submit Download

GeoHistory.mapsdata

Path /Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoHistory.mapsdata
Size 84B
SHA256 3c247e22168f7bd24cff896e8b9200d3c4f3229d4a15f5353c4c61483dabfd52
MD5 e32332952b2ccee296093224aea5acf9
SHA1 c0418197668954a7baa345478971e86b9ae132b0
SHA512 089266dd43d52eef5fc38f15e217b3c9d7dae317757cbbfee9d0f21fb2264753de8c9b9c55736113d8e2a560c7d29a9d8ce5f13af742af380d4ccd717a04f5ec
MD5 SHA1 SHA512

Submit Download

data.data

Path /Users/run/Library/Saved Application State/com.apple.systempreferences.savedState/data.data
Size 1KB
SHA256 ac05e0ee9a4cf695aeaad4ff3d273abac1907b3b276ec53f290201c34930ee44
MD5 d63dddb5bf42e55807566adbf4cb71cc
SHA1 78f17c5d69493f1c2a60948746482ca734f6ac43
SHA512 d63764b87cdfdc86a4eda616e611f33cd100d513c1178282b629768e7927d1e4ac51cdd9ea7ea6b922fd039389ad5041021bf20f6c80e0c9735c98f29fb14fd2
MD5 SHA1 SHA512

Submit Download

tailspin-trace.2024-06-21_16-28-28.tailspin

Path /private/var/db/spindump/tailspin-trace.2024-06-21_16-28-28.tailspin
Size 18.2MB
SHA256 44b55e33f47a71d51b69dead38a9f037032d6ac1335731800df612fb286ee768
MD5 bc7782f8c6e5a06e327f2975a3e877e7
SHA1 b3af06bd88ef1c33416e2c21cbc6577fa3e68bdb
SHA512 8b70505d8b7e896ce8a0980be4e5c9f82f6eca9d2c74775d8821a84455c48e87a2d5b712e9edbfbd9e925f86445d569decf80581ec5e55d30ab8dc33f0139afe
SSDEEP 196608:3xmHRzyu83hqoa2fNd7kkQj7kqfSLh3bqPeX9wm2ttjqUS0e1C:hmD8x5j7TwWMX5tAUcC
MD5 SHA1 SHA512 SSDEEP

Submit Download

tailspin-trace.2024-06-21_16-28-36.tailspin

Path /private/var/db/spindump/tailspin-trace.2024-06-21_16-28-36.tailspin
Size 5.1MB
SHA256 483bc1e0af517b63f418d0a9911a81ba125cfaccc7ce408af6c014c765ee9698
MD5 91104233fe1a9816a84d44185d7e0992
SHA1 87f72b73923cb17c61f9f3e25aa029d1792001ce
SHA512 f8e59575a1b94fcf4859e07d3bca707448c846241ec35f35380cb7409e81b32657ed0dab5bfb9b1d95e07180974c4f40b7cc3b303cac3875d23d680df0926178
SSDEEP 49152:AOpKvoJspl0uIEw9jLt5p+0hEWpJsad5AhxhM8Qbzi7MB:TpI0+l0ubWX5c3Kz5
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsDirectory.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
Size 47KB
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdsObject.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
Size 4KB
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
MD5 SHA1 SHA512 SSDEEP

Submit Download

spindump.2.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.2.txt
Size 4.3MB
SHA256 973b9374c5bb23a7084f2780eef6d2ef16e0f27fd9921104a1106737e1b27f53
MD5 250093a7d7f2d557ab8698a84b44cd5f
SHA1 3d3d7c06e6bf8a9f787e61d1a163543e54a3f6ba
SHA512 489d96341179a2c3f2d40992b7acd2708f8d3bef963c7f88e2f1ba09aa8e2399ad9065a640d7b97d8d959b7ef40927e4bde2c0088e5c14e84c740a34975d630a
SSDEEP 49152:D3T+t7TYKSW/btVlOj/I8QsOFliGooo0RWC7jqqha:D3SiKSW/bPza
MD5 SHA1 SHA512 SSDEEP

Submit Download

spindump.txt

Path /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt
Size 5.1MB
SHA256 42e7b7c1649e286e4d1b19242b434860d02f62649ef09b823fd38df7a475a099
MD5 05bbdf2312e285ff8b881cd022b6f733
SHA1 f3e0a094aaf55737e64f635fd02392e626481313
SHA512 79acffca4820f7fffeebce4f26227f951668589310bee12a55b397947e17fcbe58831272e70e95be412787fb59faff84760cf358519ef4205f6cdd616f04c542
SSDEEP 12288:n7CLKspWKU+bz3g1K5T6VifJQ7vxYUx7DnxgfD+Xo0rkYB9AZJbm0SaQIVLlZKCA:neLCbSX/fU7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads