Overview

overview

4

Static

static

1

SuspiciousPackage.dmg

macos-10.15-amd64

1

Suspicious...ackage

macos-10.15-amd64

1

Suspicious...on.app

macos-10.15-amd64

1

Suspicious...ts.pdf

windows7-x64

3

Suspicious...ts.pdf

windows10-2004-x64

3

Suspicious...nt.rtf

windows7-x64

4

Suspicious...nt.rtf

windows10-2004-x64

1

Suspicious...t/spkg

macos-10.15-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    SuspiciousPackage.dmg

  • Size

    6.6MB

  • MD5

    9eeeab679458f8a51892c0ad26ac8f55

  • SHA1

    5d7cbee585c63f36b19871294241c2e7c9fd61cf

  • SHA256

    fff88bec145da31f8a0350899c6b6d5108947ec92e05e306adfd5850db7f9bdd

  • SHA512

    c5691ee5f9602b051cea903851f6eec10faff55943fc8de0e97a082af75979e03e36a73d2e92672b3a165ae7fbc758f48c2e74b9ee459401cdd1119b6bccb1f9

  • SSDEEP

    196608:xA7/vHQtg1wxqrI9jm/Fj5okPijtWPmpLk:A/ou1wxqrI1m/xLPIr

Score
1/10

Malware Config

Signatures

Files

  • SuspiciousPackage.dmg
    .dmg macos
  • Suspicious Package 4.5/.DS_Store
  • Suspicious Package 4.5/.background/MRSDiskImageBackground.tiff
  • Suspicious Package 4.5/.fseventsd/fbd8c3022e012639
    .gz

    Password: infected

  • fbd8c3022e012639
  • Suspicious Package 4.5/.fseventsd/fbd8c3022e01263a
    .gz

    Password: infected

  • fbd8c3022e01263a
  • Suspicious Package 4.5/.fseventsd/fbd8c303bd19f807
    .gz

    Password: infected

  • fbd8c303bd19f807
  • Suspicious Package 4.5/.fseventsd/fbd8c303bd19f808
    .gz

    Password: infected

  • fbd8c303bd19f808
  • Suspicious Package 4.5/.fseventsd/fbd8c303bd19f9d1
    .gz

    Password: infected

  • fbd8c303bd19f9d1
  • Suspicious Package 4.5/.fseventsd/fbd8c303bd19f9d2
    .gz

    Password: infected

  • fbd8c303bd19f9d2
  • Suspicious Package 4.5/.fseventsd/fbd8c303bf9f780d
    .gz

    Password: infected

  • fbd8c303bf9f780d
  • Suspicious Package 4.5/.fseventsd/fbd8c303bf9f780e
    .gz

    Password: infected

  • fbd8c303bf9f780e
  • Suspicious Package 4.5/.fseventsd/fseventsd-uuid
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Info.plist
    .xml
  • Suspicious Package 4.5/Suspicious Package.app/Contents/MacOS/Suspicious Package
    .macho macos arch:arm64 arch:x64
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PkgInfo
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Info.plist
    .xml
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/MacOS/SuspiciousPackagePreviewExtension
    .macho macos arch:arm64 arch:x64
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Resources/en.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Resources/fr.lproj/InfoPlist.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Resources/fr.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Resources/sv.lproj/InfoPlist.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/Resources/sv.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/PlugIns/SuspiciousPackagePreviewExtension.appex/Contents/_CodeSignature/CodeResources
    .xml
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/AppIcon.icns
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Assets.car
    .pdf
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ActivePackagePickerView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/BomDifferenceView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/BomOutlineView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/CLIHelpView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ComparePanelView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ContentFilterView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/DiffablePrefPane.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ExportStatusView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/FileInfoView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/FilePermissionsView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/FolderPrivacyFixView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/FolderPrivacyNotifyView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/GeneralPrefPane.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/LaunchInspectorView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/MainMenu.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ReceiptsDetailView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ReviewDetailView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ReviewSummaryView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/SaveSearch.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/SavedSearchEditView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ScriptPlaceholderView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ScriptsBrowserView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/ScriptsInfoView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/SearchPrefPane.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/SuspiciousPackage.helpIndex
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/SuspiciousPackageDocument.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/Base.lproj/WelcomePanelView.nib
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/DefaultSavedSearches.plist
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/InternetAccessPolicy.plist
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/LicenseAgreement.rtf
    .rtf
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/SuspiciousPackage.sdef
    .xml
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/AccessibilityImageDescriptions.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/DefaultSavedSearches.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/Errors.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/InfoPlist.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/InternetAccessPolicy.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/Localizable.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/Scripting.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/Scripting.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/en.lproj/ServicesMenu.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/AccessibilityImageDescriptions.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ActivePackagePickerView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/BomDifferenceView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/BomOutlineView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/CLIHelpView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ComparePanelView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ContentFilterView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/DefaultSavedSearches.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/DiffablePrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/Errors.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ExportStatusView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/FileInfoView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/FilePermissionsView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/FolderPrivacyFixView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/FolderPrivacyNotifyView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/GeneralPrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/InfoPlist.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/InternetAccessPolicy.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/LaunchInspectorView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/Localizable.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/MainMenu.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ReceiptsDetailView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ReviewDetailView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ReviewSummaryView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/SaveSearch.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/SavedSearchEditView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ScriptPlaceholderView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/Scripting.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/Scripting.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ScriptsBrowserView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ScriptsInfoView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/SearchPrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/ServicesMenu.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/SuspiciousPackageDocument.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/fr.lproj/WelcomePanelView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/AccessibilityImageDescriptions.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ActivePackagePickerView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/BomDifferenceView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/BomOutlineView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/CLIHelpView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ComparePanelView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ContentFilterView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/DefaultSavedSearches.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/DiffablePrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/Errors.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ExportStatusView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/FileInfoView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/FilePermissionsView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/FolderPrivacyFixView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/FolderPrivacyNotifyView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/GeneralPrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/InfoPlist.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/InternetAccessPolicy.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/LaunchInspectorView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/Localizable.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/Localizable.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/MainMenu.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ReceiptsDetailView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ReviewDetailView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ReviewSummaryView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/SaveSearch.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/SavedSearchEditView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ScriptPlaceholderView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/Scripting.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/Scripting.stringsdict
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ScriptsBrowserView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ScriptsInfoView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/SearchPrefPane.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/ServicesMenu.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/SuspiciousPackageDocument.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/Resources/sv.lproj/WelcomePanelView.strings
  • Suspicious Package 4.5/Suspicious Package.app/Contents/SharedSupport/spkg
    .macho macos arch:arm64 arch:x64
  • Suspicious Package 4.5/Suspicious Package.app/Contents/_CodeSignature/CodeResources
    .xml