Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://blaydota-doc...

macos-10.15-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://blaydota-doc.com
  • Sample260510-jprmjsd19n
Score
8/10
credential_accessdefense_evasionexfiltrationmacos

Malware Config

Targets

    • Target
      https://blaydota-doc.com
    Score
    8/10
    credential_accessdefense_evasionexfiltration

    • Keychain

      Access macOS credential management system that stores account names, passwords, private keys, certificates, sensitive application data, payment data, and secure notes.

      credential_access

    • Exfiltration Over Alternative Protocol

      Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.

      exfiltration

    • System Checks

      Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.

      defense_evasion

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks