General
- Target ZoomForCourts.scpt
- Size 6KB
- Sample260602-phnvzaes3q
- SHA256 e78ee8e3efb2f35a8fb7e84bdba88c4d4ff3ae1d972f90baab86c498dd90e487
- MD5 53763bd37693b4fa5dc670eaaa1552d2
- SHA1 39dff8ce5915b7d9270a1c82aa6b11f52f2b227d
- SHA512 887a9db64d07f52b751e7280d75163fdb19db698e33f2ae72acea3e115841eab177456a5ca0597f6821409b33d87b4fdaa8c8a5755e1238560fc4d7b9be5bd79
- SSDEEP 192:3oXwqnS1074Qle4x6d7QH3z393MMELw6pes:4k16I4x6N2z393MMED
- TLSH T109D185CEAE456B5027EB83DBB4A743ADD77FD02F5701204940DC80581356BACD3EB16A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ZoomForCourts.scpt
Resource
macos-20250619-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ZoomForCourts.scpt
- Size 6KB
- SHA256 e78ee8e3efb2f35a8fb7e84bdba88c4d4ff3ae1d972f90baab86c498dd90e487
- MD5 53763bd37693b4fa5dc670eaaa1552d2
- SHA1 39dff8ce5915b7d9270a1c82aa6b11f52f2b227d
- SHA512 887a9db64d07f52b751e7280d75163fdb19db698e33f2ae72acea3e115841eab177456a5ca0597f6821409b33d87b4fdaa8c8a5755e1238560fc4d7b9be5bd79
- SSDEEP 192:3oXwqnS1074Qle4x6d7QH3z393MMELw6pes:4k16I4x6N2z393MMED
- TLSH T109D185CEAE456B5027EB83DBB4A743ADD77FD02F5701204940DC80581356BACD3EB16A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Exfiltration Over Alternative Protocol
Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
-
File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.