Overview

overview

1

Static

static

1

4e3464a13b...77.zip

macos-10.15-amd64

1

Payload/Tr...2x.png

macos-10.15-amd64

1

Payload/Tr...ad.png

macos-10.15-amd64

1

Payload/Tr...ts.car

macos-10.15-amd64

1

Payload/Tr....dylib

macos-10.15-amd64

1

Payload/Tr....plist

macos-10.15-amd64

1

Payload/Tr...kgInfo

macos-10.15-amd64

1

Payload/Tr...allerX

macos-10.15-amd64

1

Payload/Tr...ore.gz

macos-10.15-amd64

1

TrollStore.tar

macos-10.15-amd64

1

TrollStore...29.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...40.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...50.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...57.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.png

macos-10.15-amd64

1

TrollStore...60.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...3x.jpg

macos-10.15-amd64

1

TrollStore...72.jpg

macos-10.15-amd64

1

TrollStore...2x.jpg

macos-10.15-amd64

1

TrollStore...Helper

macos-10.15-amd64

1

TrollStore...lStore

macos-10.15-amd64

1

TrollStore...helper

macos-10.15-amd64

1

Payload/Tr...es.xml

macos-10.15-amd64

1

Payload/Tr....dylib

macos-10.15-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MDE_File_Sample_4e3464a13ba8fca963fe9a50ee867951955ed977.zip

  • Size

    6.6MB

  • MD5

    02b425c367c073f0faabc5cbb46a2086

  • SHA1

    dd0f104ba3f663ab47418bf199e0a1a195b9c1f2

  • SHA256

    d62a9622a4e0272e53a91becf333de3fd158fe823c4c9c8896059ef6f9d77cdd

  • SHA512

    52b54ae6dd0ba63876907c262b18f706f89729cdc6e32bd932ae72ce8279bafac988cb928522350de62c256583330eb8e9f047c7f6872fd2ffc9b398c05a0229

  • SSDEEP

    196608:NlBUyUqWQ19TNfsJMtvShZP/Ei/z/UWG5cy78KLfMl7q:NltnWEVZsJMBe5E0LUR5c88KLw7q

Score
1/10

Malware Config

Signatures

Files

  • MDE_File_Sample_4e3464a13ba8fca963fe9a50ee867951955ed977.zip
    .zip

    Password: password

  • 4e3464a13ba8fca963fe9a50ee867951955ed977
    .zip

    Password: password

  • Payload/TrollInstallerX.app/[email protected]
    .png
  • Payload/TrollInstallerX.app/AppIcon76x76@2x~ipad.png
    .png
  • Payload/TrollInstallerX.app/Assets.car
  • Payload/TrollInstallerX.app/Frameworks/libswift_Concurrency.dylib
    .dylib macos arch:arm64
  • Payload/TrollInstallerX.app/Info.plist
  • Payload/TrollInstallerX.app/PkgInfo
  • Payload/TrollInstallerX.app/TrollInstallerX
    .macho macos arch:arm64
  • Payload/TrollInstallerX.app/TrollStore.tar
    .gz

    Password: password

  • TrollStore.tar
    .tar

    Password: password

  • TrollStore.app/AppIcon29x29.png
    .jpg

    Password: password

  • TrollStore.app/[email protected]
    .jpg

    Password: password

  • TrollStore.app/[email protected]
    .jpg

    Password: password

  • TrollStore.app/AppIcon40x40.png
    .jpg

    Password: password

  • TrollStore.app/[email protected]
    .jpg

    Password: password

  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/AppIcon50x50.png
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/AppIcon57x57.png
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/[email protected]
    .png
  • TrollStore.app/AppIcon60x60.png
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/AppIcon72x72.png
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/AppIcon76x76.png
    .jpg
  • TrollStore.app/[email protected]
    .jpg
  • TrollStore.app/Base.lproj/LaunchScreen.storyboardc/Info.plist
  • TrollStore.app/Base.lproj/LaunchScreen.storyboardc/Kx4-55-vNS-view-9BB-B5-Vbi.nib
  • TrollStore.app/Base.lproj/LaunchScreen.storyboardc/UITabBarController-9el-pn-lH0.nib
  • TrollStore.app/Base.lproj/LaunchScreen.storyboardc/X3T-Aa-nEE-view-vAu-RC-m7d.nib
  • TrollStore.app/Info.plist
    .xml
  • TrollStore.app/PersistenceHelper
    .macho macos arch:arm64
  • TrollStore.app/TrollStore
    .macho macos arch:arm64
  • TrollStore.app/trollstorehelper
    .macho macos arch:arm64
  • Payload/TrollInstallerX.app/_CodeSignature/CodeResources
    .xml
  • Payload/TrollInstallerX.app/libxpf.dylib
    .dylib macos arch:arm64