General

  • Target

    62688cb34bc81e79047cd2fa4ae437c6800a7cdc729035208895f73b7b893db3

  • Size

    500KB

  • MD5

    9e6c4b9551969ac5c23b88447d7f53d8

  • SHA1

    30ab87c328aff9f69ef11007ee8e15b83e69e78d

  • SHA256

    62688cb34bc81e79047cd2fa4ae437c6800a7cdc729035208895f73b7b893db3

  • SHA512

    46d2d8df9a6699ba08afe1e1c5612e343d13057352e6cfd0e01087e7bfa0e16a58b7f86fc7407396420bc833223408429ba44cbd1eb2f36fa53e265c8b8c51c0

  • SSDEEP

    12288:E6R5pmWVesXbqAM5Nq4rcU1UY65dR5wt1vS+bCEfpWMhsG:EGDmW0lAMzq6cUKtQrvjCPMh

Score
10/10

Malware Config

Extracted

Family

amosstealer

C2

91.103.252.213:443

Attributes
  • uuid

    ba04bfe0-7d11-4ddf-8571-e49b58970481

Signatures

Files

  • 62688cb34bc81e79047cd2fa4ae437c6800a7cdc729035208895f73b7b893db3
    .dmg macos
  • source_folder/.DS_Store
  • source_folder/.DropDMGBackground/background.png
    .png
  • source_folder/.DropDMGBackground/background.png:com.apple.provenance
  • source_folder/.DropDMGBackground:com.apple.provenance
  • source_folder/.fseventsd/00000000023e6fa3
    .gz
  • 00000000023e6fa3
  • source_folder/.fseventsd/00000000023e6fa4
    .gz
  • 00000000023e6fa4
  • source_folder/.fseventsd/00000000023e70c2
    .gz
  • 00000000023e70c2
  • source_folder/.fseventsd/00000000023e70c3
    .gz
  • 00000000023e70c3
  • source_folder/.fseventsd/00000000023e7121
    .gz
  • 00000000023e7121
  • source_folder/.fseventsd/00000000023e7122
    .gz
  • 00000000023e7122
  • source_folder/.fseventsd/fseventsd-uuid
  • source_folder/.journal
  • source_folder/.journal_info_block
  • source_folder/AppleApp.app/Contents/Info.plist
    .xml
  • source_folder/AppleApp.app/Contents/Info.plist:com.apple.provenance
  • source_folder/AppleApp.app/Contents/MacOS/AppleApp
    .macho macos arch:arm64 arch:x64
  • source_folder/AppleApp.app/Contents/MacOS/AppleApp:com.apple.provenance
  • source_folder/AppleApp.app/Contents/MacOS:com.apple.provenance
  • source_folder/AppleApp.app/Contents/Resources/AppIcon.icns
    .png
  • source_folder/AppleApp.app/Contents/Resources/AppIcon.icns:com.apple.provenance
  • source_folder/AppleApp.app/Contents/Resources:com.apple.provenance
  • source_folder/AppleApp.app/Contents:com.apple.provenance
  • source_folder/AppleApp.app:com.apple.provenance
  • source_folder:com.apple.provenance