Overview

overview

8

Static

static

1

Sleipnir_setup.dmg

macos-10.15-amd64

1

Sleipnir/Sleipnir

macos-10.15-amd64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Sleipnir_setup.dmg

  • Size

    543KB

  • Sample

    240712-k848eszapf

  • MD5

    47f1f55aabf26cac22758a4d90ad716b

  • SHA1

    7f9f68c91675e06745c7567d3baa563616fe8b7d

  • SHA256

    fcd16fd403b25118db311933acda5efa1c6fd1b07c0270f8fbb3efc4993398e2

  • SHA512

    6818f18b783c24fe7657793523746dd115d43412de3f3312c8bd027111a8565768532c2174ba8518309e6c1115d76033834e7ef891fac0df0fefade28e0b8831

  • SSDEEP

    6144:VlW9JK5cZoD9X2TxjjA4J3+9q0b9XATzj5AS0X7TamHcA2Z/XKXvnLHc/m3Z6Z/f:VlWzZ6i3+wEf7TfvnL8+JC/pw1Vqp

Score
8/10
exfiltrationmacos

Malware Config

Targets

    • Target

      Sleipnir_setup.dmg

    • Size

      543KB

    • MD5

      47f1f55aabf26cac22758a4d90ad716b

    • SHA1

      7f9f68c91675e06745c7567d3baa563616fe8b7d

    • SHA256

      fcd16fd403b25118db311933acda5efa1c6fd1b07c0270f8fbb3efc4993398e2

    • SHA512

      6818f18b783c24fe7657793523746dd115d43412de3f3312c8bd027111a8565768532c2174ba8518309e6c1115d76033834e7ef891fac0df0fefade28e0b8831

    • SSDEEP

      6144:VlW9JK5cZoD9X2TxjjA4J3+9q0b9XATzj5AS0X7TamHcA2Z/XKXvnLHc/m3Z6Z/f:VlWzZ6i3+wEf7TfvnL8+JC/pw1Vqp

    Score
    1/10
    behavioral1

    • Target

      Sleipnir/Sleipnir

    • Size

      284KB

    • MD5

      25d2c91acf8b1ca9c69bd2afd707e697

    • SHA1

      1fc59c0d6d01e484be066920f721188ce89c89eb

    • SHA256

      ed1a3acea43f61d1badb437bc27392da5dd773967af6560d4998c17ee36b0aef

    • SHA512

      bda0e31441506fd8a6c19a4993ef18af1b7bd4c06eebf3982b3b7be8912bd63210b26d2a296bccded781a7e4dd4529aa8e99d12b0853d5534d78000e1ef3dc4f

    • SSDEEP

      3072:RVaNn2bZoBJyyKkDT/8Nh+3Nn2bZrFaZvmkDT/:Ryn2bZoBJyyK8Wqn2bZBaZu8

    Score
    8/10
    exfiltration

    • Identifies hardware specifics through system_profiler

    • Exfiltration Over Alternative Protocol

      Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.

      exfiltration
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Exfiltration Over Alternative Protocol

1
T1048

Exfiltration Over Unencrypted Non-C2 Protocol

1
T1048.003

Command and Control

Impact

Resource Development

Reconnaissance

Tasks