General
- Target checkmacos.sh
- Size 993B
- Sample260113-ttd75act8f
- SHA256 0ffa6dafa8c65e522224da55752e0b4b8b5fb386719a866247e40e788f5fa0d1
- MD5 7f36c1055b23492035234453bbc5628c
- SHA1 095a91f6d8d9c7b4eaa714b5ff8a9722b6eaabd0
- SHA512 f9faccea719a47f3acad05652cbc6e0df0419d3f321d525fa908902b149b376dd6d4b38493697287715d624f4c7bc04f294b740991827b59a8516058ccbf4b18
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
checkmacos.sh
Resource
ubuntu1804-amd64-20251231-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
checkmacos.sh
Resource
debian9-armhf-20251231-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
checkmacos.sh
Resource
debian9-mipsbe-20251231-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
checkmacos.sh
Resource
debian9-mipsel-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target checkmacos.sh
- Size 993B
- SHA256 0ffa6dafa8c65e522224da55752e0b4b8b5fb386719a866247e40e788f5fa0d1
- MD5 7f36c1055b23492035234453bbc5628c
- SHA1 095a91f6d8d9c7b4eaa714b5ff8a9722b6eaabd0
- SHA512 f9faccea719a47f3acad05652cbc6e0df0419d3f321d525fa908902b149b376dd6d4b38493697287715d624f4c7bc04f294b740991827b59a8516058ccbf4b18
- MD5 SHA1 SHA512
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral2
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral3
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral4
discoveryexecutionpersistenceprivilege_escalation
Score
6/10