Overview

overview

8

Static

static

1

d.jpg

macos-10.15-amd64

8

Resubmissions

07/08/2024, 05:14

240807-fxcltavhmb 8

07/08/2024, 05:11

240807-fvkjmsvgrg 4

Sharing

Copy URL Twitter E-mail

General

  • Target

    d

  • Size

    86KB

  • Sample

    240807-fxcltavhmb

  • MD5

    3ba9bc53bd83fb2d029e4b643ffde93b

  • SHA1

    7cbd0d73f7480fdcfe899ab232e71f1d4016bb40

  • SHA256

    bad50725042fb461f99009a568bb41f770f3b2c6cb532ee37ec3c18207b78de0

  • SHA512

    4186720bac3b1ef6a5086a8d3a950fc081c4fe64c886445bfb7fdaadedcd950706126ab0c7e77549bd6f651227df493fe1ee81b5055e9b0bc71eeb13cd9d9644

  • SSDEEP

    1536:TG1ypEYEleO58azajLIDCzs5peruJhHXOzi5yK4qrVHTJUvndEt78RtAh0y1endM:TG1ypEYTA8C2zsp3OeAq9TKdEtA5y18y

Score
8/10
discoveryevasionmacos

Malware Config

Targets

    • Target

      d

    • Size

      86KB

    • MD5

      3ba9bc53bd83fb2d029e4b643ffde93b

    • SHA1

      7cbd0d73f7480fdcfe899ab232e71f1d4016bb40

    • SHA256

      bad50725042fb461f99009a568bb41f770f3b2c6cb532ee37ec3c18207b78de0

    • SHA512

      4186720bac3b1ef6a5086a8d3a950fc081c4fe64c886445bfb7fdaadedcd950706126ab0c7e77549bd6f651227df493fe1ee81b5055e9b0bc71eeb13cd9d9644

    • SSDEEP

      1536:TG1ypEYEleO58azajLIDCzs5peruJhHXOzi5yK4qrVHTJUvndEt78RtAh0y1endM:TG1ypEYTA8C2zsp3OeAq9TKdEtA5y18y

    Score
    8/10
    discoveryevasion

    • Path Permission

      Adversaries may modify directory permissions/attributes to evade access control lists (ACLs) and access protected files.

      evasion

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

      evasion

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

      evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks