27b1030aa06d0ad288268be4b70b1e0dd92bd82df29f8a1e9bc6530a2c1664fe

General

Target
MicrosoftTeamsAddIn.dmg
Size 263KB
Sample260603-pf3lcaew4v
SHA256 27b1030aa06d0ad288268be4b70b1e0dd92bd82df29f8a1e9bc6530a2c1664fe
MD5 69e782fe7d80328daccb58edab83e949
SHA1 971aef896a3aab4cab88a102b9d359c5d525590c
SHA512 6e786f743a05e5af5bddc492a029e089a7e441c39546c18d9035b81a3e276298f47edb1e6ef2aa557065f1069fb57d7e869897efd7446c01298f751bd36c9857
SSDEEP 6144:UpNEHZrn/sTXrrGSOj7iml1pM/RMobtXuynTBq9S3P6j:UpNIrETbKSORHpMVbEy0j
TLSH
T17D44127A480E18FDDD1825F42A7490654CCE7BC3C9F185F6E26730BE16E990B397892B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  MicrosoftTeamsAddIn.dmg
- Size 263KB
- SHA256 27b1030aa06d0ad288268be4b70b1e0dd92bd82df29f8a1e9bc6530a2c1664fe
- MD5 69e782fe7d80328daccb58edab83e949
- SHA1 971aef896a3aab4cab88a102b9d359c5d525590c
- SHA512 6e786f743a05e5af5bddc492a029e089a7e441c39546c18d9035b81a3e276298f47edb1e6ef2aa557065f1069fb57d7e869897efd7446c01298f751bd36c9857
- SSDEEP 6144:UpNEHZrn/sTXrrGSOj7iml1pM/RMobtXuynTBq9S3P6j:UpNIrETbKSORHpMVbEy0j
- TLSH
  T17D44127A480E18FDDD1825F42A7490654CCE7BC3C9F185F6E26730BE16E990B397892B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery exfiltration
- Exfiltration Over Alternative Protocol
  Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
  exfiltration
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  defense_evasion
behavioral1
- Target
  MicrosoftTeamsAddIn/MicrosoftTeamsAddIn.app/Contents/MacOS/MicrosoftTeamsAddIn
- Size 163KB
- SHA256 091735de5039eacb4943e158224d71fd9798ae02c4af101481909dbe57863a01
- MD5 7806146b292005558d612d55dfb1e27d
- SHA1 10548b3895d78f81dc82f7a0f3deff98b4cfa259
- SHA512 44556f9e115ff8775b6b836cbc8595c4ad13463885515b6d708d4da2c54e1de9cf5ebbe8d63220f02d865aa0e2def94f96fa1d8e98cadba051beb44a7e20eb63
- SSDEEP 1536:qmiNHi2DLgo7ODNXURWHPcKUMqfNHi2DLgo7ODNXURWHPG:qmEimc70Kpcimc7e
- TLSH
  T1FDF3E0334A7DAA3FC96841B0A0BF2BD7F216E4405E4ACB475B51C7D11EF43A86D0AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery exfiltration
- Exfiltration Over Alternative Protocol
  Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
  exfiltration
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- System Checks
  Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
  defense_evasion
behavioral2