Overview

overview

4

Static

static

1

98bb30ec17...72.dmg

macos-10.15-amd64

4

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl....dylib

macos-10.15-amd64

1

Omni Downl...loader

macos-10.15-amd64

1

Omni Downl...estore

macos-10.15-amd64

4

Omni Downl...ervice

macos-10.15-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98bb30ec1732b1e19f1a3ed0de9d6ade2813fdf7c3795b93037fde3df5befe72.dmg

  • Size

    17.2MB

  • Sample

    240911-j2vjzazgpr

  • MD5

    39cf0a66e523568307e1e8cc256aaea3

  • SHA1

    5bb92429aabeaf83f532b83c56705d3f1654c270

  • SHA256

    98bb30ec1732b1e19f1a3ed0de9d6ade2813fdf7c3795b93037fde3df5befe72

  • SHA512

    c90bf3c50daf521a0e3c1fce0f597b5400bcf272a4416ee1bd8c376e0abd2f1b8a98bd04054b8b6ea349fcd074752d8cb87f083541b9a35646b67b0f8189e858

  • SSDEEP

    196608:O71HiBoXE8nZBwJWzdDtTgV+cerdRBwRTCaXAh+Hs6hqeV0NInIlempIeKdTr8qN:O71Fh9B7RwZpXAQMYJIlLp4IQ8B7mSL

Score
4/10
evasionmacos

Malware Config

Targets

    • Target

      98bb30ec1732b1e19f1a3ed0de9d6ade2813fdf7c3795b93037fde3df5befe72.dmg

    • Size

      17.2MB

    • MD5

      39cf0a66e523568307e1e8cc256aaea3

    • SHA1

      5bb92429aabeaf83f532b83c56705d3f1654c270

    • SHA256

      98bb30ec1732b1e19f1a3ed0de9d6ade2813fdf7c3795b93037fde3df5befe72

    • SHA512

      c90bf3c50daf521a0e3c1fce0f597b5400bcf272a4416ee1bd8c376e0abd2f1b8a98bd04054b8b6ea349fcd074752d8cb87f083541b9a35646b67b0f8189e858

    • SSDEEP

      196608:O71HiBoXE8nZBwJWzdDtTgV+cerdRBwRTCaXAh+Hs6hqeV0NInIlempIeKdTr8qN:O71Fh9B7RwZpXAQMYJIlLp4IQ8B7mSL

    Score
    4/10
    evasion
    behavioral1

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/BackupManager.dylib

    • Size

      859KB

    • MD5

      183f2639aeb1870ade9e83a1cb69e015

    • SHA1

      412e66995cfa597686a11e58e4c20764bbb15bbf

    • SHA256

      f1539e18146c51be2eb3dbe0001e70b7756d0608ca84ec4c40b9251eeb4c692b

    • SHA512

      72f093d58bd4f7ec620695296f7ee477fa70d4044571dfed2129c4c7ccf19e05f4e9dd7626fa6ddea0c30a0264a09f288c6071de7051992deb5c44e073406645

    • SSDEEP

      6144:4D0lGl9j2huJsSnTNTd1yEby7h7HszlbMxwdncJQDNQTQvjYk5bVf4iqKds7Jcfu:4D0lLuJrFd1OszlbMscJwDuRK6vYFe4

    Score
    1/10
    behavioral2

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/Logger.dylib

    • Size

      390KB

    • MD5

      6eb70778273300bf2b1b2c61f2c405e2

    • SHA1

      d76dddd02608f2f62ff2cd150e806b0f7a709a84

    • SHA256

      73fd70b1d3e7e133a7809e158acebd17b6e145f0ef782ce542a9e0a161aa51c4

    • SHA512

      a90f24f9957ca5000f61fa2ac738fb887700588f063e3742c8f1d5cd0bb898f9d6e19f722a01e458902e605af8ef9fee7bc3ee0dfd991df4474ba9af4740307b

    • SSDEEP

      3072:D5MwS7ffkhhYNC40s36AcG6+DZuDVz7K8lZgqd6hHqFG:e7ffkhh6C40G2Ao94Bqw

    Score
    1/10
    behavioral3

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/ModelBase.dylib

    • Size

      1.8MB

    • MD5

      c6c1b54337d73d2084f32f3a313de407

    • SHA1

      663990fe326164ef4fbb4ae3147268973107a39e

    • SHA256

      9fd77aae859455bea024844c11ea3a1084a8594589a5e8cbd98e958ca34df8e7

    • SHA512

      c5a46a54fa43f8d66a8a1db30203603eac8075dec6422a4f983df754f60e1e2255b6fc798a67bf83f5e59c6459ff2d589b1676ed94b886c025e40074f239c4e0

    • SSDEEP

      24576:+euZKV2MSKV2MN669LnYJhB6FxrV2M/V2M:mKV2MSKV2MN669LqB0rV2M/V2M

    Score
    1/10
    behavioral4

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/SqliteManager.dylib

    • Size

      433KB

    • MD5

      c4db6956052ce7fb42c789f35d42a3a3

    • SHA1

      2cef7f05f326b99c1e60c289f0bc2833f4c7a977

    • SHA256

      c67068a19af775b4275696ddc0e1e66da0753458b9590b9ad34a524095c21cbb

    • SHA512

      65c976924c225183c2adedb5baf9441d94700a6ee6aa210010e9f4d1b62fcd6a27e52f6c8fc76d795d6abaaf33c254f6f93a2ae13b8453887b7b6a23c441230a

    • SSDEEP

      6144:MhXP9Ajkfwtjb4Zb2T5po4YJsljbakb3:Q1AjntQ8p/YJOC

    Score
    1/10
    behavioral5

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/UIElement.dylib

    • Size

      1.2MB

    • MD5

      0f5d2ba31558bdf0c02fdded994cff96

    • SHA1

      0f6c19e85da26d108af2b993605f2cf1ba8bb633

    • SHA256

      ac1eefc0126a76fdbbe617d4c2b6a9cdbea895beeb538cdb6b4ddacce69e8a4c

    • SHA512

      f1146f2f0daa5354427c834111ae3297e88f57e222a05b2982559f1cdc2c760fb492780b9b2903265f638f034a1feb40d90498806ef9d9ee55eb0eee2ff03096

    • SSDEEP

      24576:hj+vyVqTka0X8va7Ye0kB4TmKqUTka0Dg8va7Q:hyvyqTka0X8van4ka0Dg8va

    Score
    1/10
    behavioral6

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/UntilityCore.dylib

    • Size

      5.2MB

    • MD5

      b76c8e7bc6d1d4d3f1852b05bf43fe06

    • SHA1

      16490b24f3a7d25a3a59188c934bfd7c373728b8

    • SHA256

      e04a7e36d49eac5a0867f68e24e3af6304feb1bed926f5a613bfa4c409848207

    • SHA512

      b4041c1196b62a4c21c2b8d01cfc1fa45aa969ec909fa9bc234c46ddac0361f0d29225777b20c53a859898414192ac857d17257a5311c13a7f65014308610b88

    • SSDEEP

      98304:8cNnlFhh4/ehjebQ0rwKVotIxb2AxpotIxcuhNKKFeHwK7t1IxbiAxDIx4:8MnlFQ1otIxbjotIxcJK+t1IxbJIx4

    Score
    1/10
    behavioral7

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/ZipHelper.dylib

    • Size

      469KB

    • MD5

      cff5a3b4a7ec71cef25b646b3416f56e

    • SHA1

      0f5e0d869a91c17af9ac9824706762e9669499d1

    • SHA256

      88aedf04104dc73e30051c8404764dccaf5f9d79b9a368df3b2dd80be9ca0bed

    • SHA512

      21a1f3f09d77615afff96a7943f5bb1885dcf52445ec2ded9c1baee191d46382fa39372461ac3e4a29e8874cee86d04d363828c73b492df8e0a4977fe326094c

    • SSDEEP

      6144:AQm0fjctJ7EsfTBOgt+LF1YeEPdpJEwbvTBi5/guksi2bG:AQm0foXEsfT8gauKwbvTopk8

    Score
    1/10
    behavioral8

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libLzmaSDK.dylib

    • Size

      2.3MB

    • MD5

      4ba4a53cc62f2927ee24ced46591df2a

    • SHA1

      7af57a40b1e4f43bc80afdf5f12efb56e6b82628

    • SHA256

      43ffc4f91fcf27da6b39b8b11013e7e2e071332a03bb2580feebb0adc3a085ed

    • SHA512

      2e9d86ea66209867a96706e22e8bfd5872a35ced317ae41ce094d7a319d93145ac6bca8532b227455256cb5f24194a01d5f7126cc7c23d4a168b4379cd0f9696

    • SSDEEP

      24576:OZy7qWaVXUrGNjY3cIH9yi/iPOuRfXfGiEEqT12RT7nVlsOiFPOn:gy78jKcIIfXpP09F2

    Score
    1/10
    behavioral9

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libMediaConverter.dylib

    • Size

      855KB

    • MD5

      9d893eb28bc20297b30ac7a032083a76

    • SHA1

      e23c51d48627577e40cc9e0d245fbcb6342c12d5

    • SHA256

      d17aa6569213996fddfdae2bf2b7ea979bd10b38d11d5c609062af51c575667e

    • SHA512

      3e66a4bf4441c278dfdd9fc6b94200c1116ee633108c32e890e08d9a9d84b5117f2ea3b7fd937f84fd1c188ab586b30ba5dfd87648baf9ecf8494f652a266924

    • SSDEEP

      24576:/ZOkb/jCnermuhxnO/5STy3l3uhOOGSTy3l:/9AeLO/5STy3lXOGSTy3

    Score
    1/10
    behavioral10

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libMediaDownload.dylib

    • Size

      419KB

    • MD5

      fd54688b60781649940613fc2aac6cd5

    • SHA1

      dd7e4fc626543569d03938c8c8344abc4b832567

    • SHA256

      153feb29e1c15df452e601b7b2b867879cb99b7afb989addecfd8087dada7deb

    • SHA512

      22589011535a20dd71e3a28f4088f7ef87487575439c7ab1e87c8cdc2bc836aa1b4b28c4ccceb0bb23da6bb3f5ab003a797f6005acbe1816ae9213d523a04583

    • SSDEEP

      6144:QNIDwIVV6VmpDg2h8F4nLcjLPRTJO5yefJO5ggw7fq:Q+wIV/glzpL

    Score
    1/10
    behavioral11

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libSocket.dylib

    • Size

      548KB

    • MD5

      b29dba9c644a8d22b56690cc1952c0a4

    • SHA1

      767198186396edc17b24b85f67140b5b9f4d2c5f

    • SHA256

      ccc687b9d2cd6ff971aff32c24ebdac5a538586b5a19dad35917bfb7a804efb2

    • SHA512

      13fecc9a68a0c9c308a95012469894d9673884cf3f06d421f8ff9bed956b2a4754ec80dbf87baa2e9e1ef768d429fae77f1d919987a9baa34f0e678e937bb475

    • SSDEEP

      12288:vNggUywRSXv+kFeE8tEFH8tx0HkJwVYmwF9s8tYPJFm8tE:vWgUyw4Xv+kFeE8tEFH8tx0HkJwVYmwd

    Score
    1/10
    behavioral12

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libXlsx.dylib

    • Size

      1.2MB

    • MD5

      c5ad2052f432dd125b60a35423510dfb

    • SHA1

      bb486a2d9015fb010c9032e549aeb11f005c10b8

    • SHA256

      61d87824b4c7834d1ec5b7467c35c1063f3c64e279af430fdaac73fa941fe325

    • SHA512

      4ac59206851a827a003ecacad9317737606a4a16c96417f34a9b593b0c1a9aac8f3e00dcf1e1f5801dc1b93b7989bac3fc7cc191b6a8fc777742b4f2a970d621

    • SSDEEP

      12288:lEYEpJ/ol/vvJSVs9E8XOe44pddkJRlEBkFL5jv:l9QIv0Vsdh44Ldk2kp5

    Score
    1/10
    behavioral13

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libcrypto.1.0.0.dylib

    • Size

      1.9MB

    • MD5

      7938ccfb8d9a008b436f9a9284963c4e

    • SHA1

      fd5c3470f2df6ffffead4e9da70d27ea61f5fba3

    • SHA256

      c28c79c9ee8a29f8e23ebe91dc4f1418b3832850b952662befd73330ef2ce569

    • SHA512

      7c86cb45d4b45f547a6adf299e4f29e79cf1bcff6db4f256bb6bde0af4f18b367873879cf6b68526e208aaf5addc43574b51cf77488afe65fa2ee0754d34800b

    • SSDEEP

      49152:S0kicWngSo9Orj/W5ll25YcvzRclXLbJrHIU6iaUE/:IPNSGW4i6kQhE+aF

    Score
    1/10
    behavioral14

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Frameworks/libssl.1.0.0.dylib

    • Size

      441KB

    • MD5

      07bd98fbe193c2fad2f073ec5e5320cd

    • SHA1

      94ae1e3ebbe1c88bddd6603666822e0c9ecca29d

    • SHA256

      de0f99f0f5ef51907ebac156e4871908d20b090b0be824e292fe594ff889800b

    • SHA512

      7b3923ee6961986f8d4a21e2acae01bb2f6b9efc1394e8b179e97ee1197f423fe61f25dd4587aa6e4959b108704a06515a86f0f0d8b6e8c1d5bcdf00b069e7a9

    • SSDEEP

      12288:fHtP28RryM/J3hSm7cxHBXUHGvp7j/Lxfi+cq9/NVAu0pD:fHtP28RryM/J34icFcq9/NVt0p

    Score
    1/10
    behavioral15

    • Target

      Omni Downloader/Omni Downloader.app/Contents/MacOS/Omni Downloader

    • Size

      13.1MB

    • MD5

      60aa41e0103e7bd5a0730fd466c09e66

    • SHA1

      232331659057811da4478f6c6d61a7b6f6b18de9

    • SHA256

      bee999bbfe46beb12902e8afa6ac816155b2d0a8b06506dafa46cec860b5881e

    • SHA512

      c2d615b7811d88f2c911bf3123691ce2cf9f1aedba23a996047e3513504e9beb750a564ed5c1e0a46049e68978d4477e399eefa1f5e0af9e1a2a2a5f1625ba29

    • SSDEEP

      98304:+9OSFLddfqPPPHLoGT6ruSHenRRNTsTz+lumgDTFiWRw34cb22ajUWxPM6fK:wOSFLddfqPPP8Waen3NmqJg3dc

    Score
    1/10
    behavioral16

    • Target

      Omni Downloader/Omni Downloader.app/Contents/Resources/DeviceBackupRestore

    • Size

      182KB

    • MD5

      63852a2f458b09e0e2758f3a7d767261

    • SHA1

      a242d440935ac6b28a83943eee96051c5c2b62c8

    • SHA256

      28aeb85ca13b2fa7fcb5c49ab7fb8c5385e33e4218067567cc397f84a41ab21d

    • SHA512

      a6db2d27e4e567b3c45785520f1f7f64816ffd1daeff101888d5808286e213383ebc698d5fa68902a472cf2b7059d51c3d34b8c9d6ad2e9de72196e6d42becbc

    • SSDEEP

      1536:kQMb6IGcmri8YxEKwVRVSQMbT6hiYMcK:kQMb6IzmriNxETSQMb2hiNc

    Score
    4/10
    evasion
    behavioral17

    • Target

      Omni Downloader/Omni Downloader.app/Contents/XPCServices/calckek-service.xpc/Contents/MacOS/calckek-service

    • Size

      140KB

    • MD5

      54658bda2f08649e01114cb1d8a81983

    • SHA1

      59471060f701c133f4b3d7d3fc23dd5de5e458b6

    • SHA256

      1bc611f8d1a444bd0ccf240673e711218b97dcc3e4057ec3d5d3bafe5b85f238

    • SHA512

      a965ef3e48276f5a37bdac7993cc4a8d9ff0a67bff7a8ff25deb96ae2b67985965e9fc9b9bbd83e051397a0e86941a23a2a45990194588493432e5e5d54a8bf5

    • SSDEEP

      1536:xaefvyk8kok8P4tTlVmszlbI/pApt1pn7nfXy8weWrYi8iBK:lyk8kokm4tTGszlbIYf4Ui8S

    Score
    1/10
    behavioral18

MITRE ATT&CK Enterprise v15

Tasks