Static task
static1
Behavioral task
behavioral1
Sample
Payload/TrollInstallerX.app/Frameworks/libswift_Concurrency.dylib
Resource
macos-20240711.1-en
Behavioral task
behavioral2
Sample
Payload/TrollInstallerX.app/TrollInstallerX
Resource
macos-20240711.1-en
Behavioral task
behavioral3
Sample
TrollStore.app/PersistenceHelper
Resource
macos-20240711.1-en
Behavioral task
behavioral4
Sample
TrollStore.app/TrollStore
Resource
macos-20240711.1-en
Behavioral task
behavioral5
Sample
TrollStore.app/trollstorehelper
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
Payload/TrollInstallerX.app/libxpf.dylib
Resource
macos-20240711.1-en
General
-
Target
MDE_File_Sample_4e3464a13ba8fca963fe9a50ee867951955ed977.zip
-
Size
6.6MB
-
MD5
02b425c367c073f0faabc5cbb46a2086
-
SHA1
dd0f104ba3f663ab47418bf199e0a1a195b9c1f2
-
SHA256
d62a9622a4e0272e53a91becf333de3fd158fe823c4c9c8896059ef6f9d77cdd
-
SHA512
52b54ae6dd0ba63876907c262b18f706f89729cdc6e32bd932ae72ce8279bafac988cb928522350de62c256583330eb8e9f047c7f6872fd2ffc9b398c05a0229
-
SSDEEP
196608:NlBUyUqWQ19TNfsJMtvShZP/Ei/z/UWG5cy78KLfMl7q:NltnWEVZsJMBe5E0LUR5c88KLw7q
Malware Config
Signatures
Files
-
MDE_File_Sample_4e3464a13ba8fca963fe9a50ee867951955ed977.zip.zip
Password: password
-
4e3464a13ba8fca963fe9a50ee867951955ed977.zip
Password: password
-
Payload/TrollInstallerX.app/[email protected].png
-
Payload/TrollInstallerX.app/AppIcon76x76@2x~ipad.png.png
-
Payload/TrollInstallerX.app/Assets.car
-
Payload/TrollInstallerX.app/Frameworks/libswift_Concurrency.dylib.dylib macos arch:arm64
-
Payload/TrollInstallerX.app/Info.plist
-
Payload/TrollInstallerX.app/PkgInfo
-
Payload/TrollInstallerX.app/TrollInstallerX.macho macos arch:arm64
-
Payload/TrollInstallerX.app/TrollStore.tar.gz
Password: password
-
TrollStore.tar.tar
Password: password
-
TrollStore.app/AppIcon29x29.png.jpg
Password: password
-
TrollStore.app/[email protected].jpg
Password: password
-
TrollStore.app/[email protected].jpg
Password: password
-
TrollStore.app/AppIcon40x40.png.jpg
Password: password
-
TrollStore.app/[email protected].jpg
Password: password
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/AppIcon50x50.png.jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/AppIcon57x57.png.jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/[email protected].png
-
TrollStore.app/AppIcon60x60.png.jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/AppIcon72x72.png.jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/AppIcon76x76.png.jpg
-
TrollStore.app/[email protected].jpg
-
TrollStore.app/Base.lproj/LaunchScreen.storyboardc/Info.plist
-
TrollStore.app/Base.lproj/LaunchScreen.storyboardc/Kx4-55-vNS-view-9BB-B5-Vbi.nib
-
TrollStore.app/Base.lproj/LaunchScreen.storyboardc/UITabBarController-9el-pn-lH0.nib
-
TrollStore.app/Base.lproj/LaunchScreen.storyboardc/X3T-Aa-nEE-view-vAu-RC-m7d.nib
-
TrollStore.app/Info.plist.xml
-
TrollStore.app/PersistenceHelper.macho macos arch:arm64
-
TrollStore.app/TrollStore.macho macos arch:arm64
-
TrollStore.app/trollstorehelper.macho macos arch:arm64
-
Payload/TrollInstallerX.app/_CodeSignature/CodeResources.xml
-
Payload/TrollInstallerX.app/libxpf.dylib.dylib macos arch:arm64