6a9eb2df291e6197e7b1fc57f7181ee22816abde7209566b4be6d4d78074e1dd

Sharing

Copy URL Twitter E-mail

General

Target
downloader_mac.dmg
Size 18.0MB
Sample260605-wwfvvab16w
SHA256 6a9eb2df291e6197e7b1fc57f7181ee22816abde7209566b4be6d4d78074e1dd
MD5 51815c198cbd61e8268ceac415066277
SHA1 2e5ccf51d01fd1927b95d909f497e27d4d09de2c
SHA512 2774a996204eaa63dd80a226b7aa02d4569f624ab681abfb847e412aed060b4b2104c10b78e8c857ee844d7cbbc7c8b5f0332ed6ccde59273edf651eebbfe483
SSDEEP 393216:YcTXyLgG9jfWZL3UJfopLIKzcGdJYnQ7xIXQMPgg1/UlyLgGtUgN6f:6Y3wfophzREPl1/UvgN6
TLSH
T1FB1733B0F42D8E1AE6F2EB3ED2D54A370F9021F3C6258A198D55635239C85EB3F98C15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  downloader_mac.dmg
- Size 18.0MB
- SHA256 6a9eb2df291e6197e7b1fc57f7181ee22816abde7209566b4be6d4d78074e1dd
- MD5 51815c198cbd61e8268ceac415066277
- SHA1 2e5ccf51d01fd1927b95d909f497e27d4d09de2c
- SHA512 2774a996204eaa63dd80a226b7aa02d4569f624ab681abfb847e412aed060b4b2104c10b78e8c857ee844d7cbbc7c8b5f0332ed6ccde59273edf651eebbfe483
- SSDEEP 393216:YcTXyLgG9jfWZL3UJfopLIKzcGdJYnQ7xIXQMPgg1/UlyLgGtUgN6f:6Y3wfophzREPl1/UvgN6
- TLSH
  T1FB1733B0F42D8E1AE6F2EB3ED2D54A370F9021F3C6258A198D55635239C85EB3F98C15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Folx/Folx.app/Contents/Library/LoginItems/FolxScheduleHelper.app/Contents/MacOS/FolxScheduleHelper
- Size 73KB
- SHA256 76550d35d2c088dc7736c6fd6b636b58a1e9c686404a7053dab898aa0baf20c9
- MD5 b206c5b91c48ce017da4dd79430dac36
- SHA1 37bb04bdfa01374d40accf75991178c903e85a9f
- SHA512 2fa60f0144733be962cde13bc5eb294d6a742119991d6e2bf6536d496b621fce0cabf14c3622b41bf0d599e8e695bfb4a2cb79f8d0d196fbfad046dc3e3747d4
- SSDEEP 384:OuTchuJVQgXBiEX2So/kRunC48QddZ4tTUxLGlUJKnLi+52ow9fYr+Q8ar5JEWr5:OzhuJTBo/Hzx6ZrnCZf68eJEzab8
- TLSH
  T1A8733BC337A0148BCE879079C26AE3136532F29DDEA1A30A07E0C1D85FD5BB6670A54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Folx/Folx.app/Contents/MacOS/Folx
- Size 7.3MB
- SHA256 ec01e1d780839170e491769f70dcd37e8684257148e5811cf52bcb39d0fd4389
- MD5 4c7c80560c49685b21debbe2423489b2
- SHA1 e8501161fce95f27d053a44292105882b7bcd2e3
- SHA512 272b1059d6fd2ce7053dbf0986fa92f299368a35d725db2e7e436f3934d97957e8fca70310ed492563c25ffebc399e8b067a3178f7e13201fbbef40837fb6a3d
- SSDEEP 98304:y8kkI/9D/giTsufaPblm5xg6DKQx1eDeynrQTqsGa+QiMgKMaGbGbQyFOXXAFj:y8kkI/FgiTsukkKu1UeRqsGaobG9
- TLSH
  T116765C3B66A0811DC096D13057AF87329B70F8E62A257A0F17D0A7263FF5CE06B9D746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftAppKit.dylib
- Size 217KB
- SHA256 0209ca34b8bc9f485bea79cf33a337d5206a56462a178777e76d5cb6748fff8a
- MD5 80c96b6aec9d9fbe40f42ac0769d2714
- SHA1 2fc7d0d903f6f6612a8683d06d72762505b940e8
- SHA512 e21e410e0c2c84bd8e164477af621a541fb7ae230d0054aedbe4f9bea5d731987ad826935f92cffe078c7e79e3cac185d4f48be3b9c7acd046d34d92dfc9e9f6
- SSDEEP 3072:n2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNrJ:ioFP6r0vpGT8Ma0UPxd
- TLSH
  T1B7244C4723715E3AD66BE039CB6FD9080B24F6429A2613AED7A45531FEA57221F13C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftCore.dylib
- Size 6.2MB
- SHA256 7622072f6db8b31f4f64160973049e3316b8b702dd45fc0daae3c54a2bf08271
- MD5 6ee0d9c25f425f9dba3f7083da132858
- SHA1 f6e6ee236f229e26c65cc5f58d6ea90016d7eb67
- SHA512 61d380c04dd265648b65a0ad9ad0a88988fec43a66baf183026e2b0288d075e83ff9160df40337c432176d30bfcccf02adaca9d7d64eeaf95ca962addae0add2
- SSDEEP 98304:rgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:qolt7iI61wgwAm7Ag
- TLSH
  T140567C3F65A29D0DC2ADD070498F7A022871F4B157563DA417C4BA3A6FBAC91270EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftCoreData.dylib
- Size 96KB
- SHA256 e2482f9675f9b1f8dabc8665c71612cafc1531c0d6de0012781f7c6b137d9ef8
- MD5 180b66773dff4f0d3e5e50f133b2fbef
- SHA1 6a8fb6ba42d2ab39c81a77948fbda8c99db9c596
- SHA512 10df023cda997118dbd8c4e6a563d354db3a91e31b35c41845e61ca56d94a9769f0356cc9739fd2319c20ddcb25c6bbb5af15701a6fa4de340a8724290ea62fb
- SSDEEP 3072:cSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcx:LF1bru
- TLSH
  T166A383970BB6343BCA6A123341BBC9326870F90B2FD665B69BA14DF0259F664370750F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftCoreFoundation.dylib
- Size 41KB
- SHA256 b9b1b97d1a33c766b0b20485de15eeceff1f172123c18d179542d321cabb5c12
- MD5 fdf88259a022cc82e08db5a10e3fb9fd
- SHA1 ade77bf6334ee423aa7a73c47740981e57e1b001
- SHA512 a85af81083e6a001e0563676bf9fc1763eed96d75f3084e4f6ffda0576bc97c418db608accf5e400ac1d7779baba4239e7469a6075351a899b662c09e1d9fc1b
- SSDEEP 192:SznzqsMDWrSTo11OgCzr+RjG8P0LzrXJlTN+azrUFIRkrvlO9Usrv75alZ8P09re:Szy3WOg2r+Q8ar5JEOrQLrvQrNab8er
- TLSH
  T10E13099707983425EC9895B142CEA2439E73F2997F33106AF059D1F02B37BB42A974ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftCoreGraphics.dylib
- Size 186KB
- SHA256 7b23914a83ac9931661115a4fa0d2c3db138ffe8c029629a126d937ad03408e1
- MD5 a3f59112254970f406415906014d208f
- SHA1 21e558dba059a3378ec73efa03ce84539d88d71e
- SHA512 a42d75eaa70ffc8bbdd926c2f3ca37ed3480fb411b1b8342b843eccade5c74f2630a4223df7b9e99f4895d6c29e7e86d18ebbee15a5e99fe2f0787c9846b10ec
- SSDEEP 3072:2a1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbOYaoP:H1kJvHXD5LDAyIU
- TLSH
  T14714D55BF6622C5CCC6DC8704E9E26513015FDF827A24B5EABF050357A66E306E12BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftCoreImage.dylib
- Size 49KB
- SHA256 4a5b1ff21773c9fdd585384bbcd0e6afe8be81cd06155be17ac249b3e5fa8663
- MD5 4659e41d41478e102b630e0d5148a97b
- SHA1 86bfcd1304defbcd8bdc9e7d5d686bd0922f2265
- SHA512 fe592cebda871c91c5fea3a003f6ffcfba50e0152a8ae65ebb33456881f1fb85b2b215c84bc1d71ab95274e8dcb6614e4ef04c768e764ea418a9e305bef9a4eb
- SSDEEP 192:5p858WX+3e/kACJCyBwzr+RjG8P0LzrXJlTN+azrdd6rvlO9Usrv75alZ8P09rq:5CHktIbr+Q8ar5JEOrirvQrNab8er
- TLSH
  T1A733099B07683132EC9CA17496C9A3429E32F3997F2300AAB05681F13B77B751A5B5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftDarwin.dylib
- Size 97KB
- SHA256 81ba597341641636e26e452361d9ce789199a9dd6ebf110989a5626cf7f07fad
- MD5 c485c2ec1e4e97d86b87c9fc3ae5fca0
- SHA1 9c907edda6086edeaa2f99b30cec1b26f5513e23
- SHA512 309070f81486488ab40abe365e87f57a941606ecd0e4bd7d2d5e90c7e5ce4a36054b6d490f4273b649477387f6d28e9b2e1f05facf11681a191c6f75aa77ac84
- SSDEEP 3072:7cicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIoher:7cs1elxD8DBnVK4rywrcXARZTFW6D5Bs
- TLSH
  T147A3E79E6E63B827D625D835C8A767918933F5F84F0236195F98F0BE4E32BC0364191E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftDispatch.dylib
- Size 320KB
- SHA256 ea72aa5ceb84df4241827eb6eb75a83a22288cab1605348078f8a0cf7894e75e
- MD5 28271f5c8a9d6ed84ccd9e117c21b5fe
- SHA1 ebfdba0d0c25c5c2c347e688281b68a1f6ea3dbe
- SHA512 30e1885aa0dcdbb41fa3542e791d7b14c8cd98c7debb60339170fa566407a46475c7bf08a107713ab32adac54c0fedfad7f15ec862a4a27bc326ea339d30128f
- SSDEEP 3072:1o5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQm68p2:a5R9iqOEcKbAgHMWbBZ7oS1bXVp2
- TLSH
  T18064B6FAD2E64E24C434807883BF79221323F47193712768D764B2A56E7ED546E1FE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftFoundation.dylib
- Size 3.0MB
- SHA256 8efbd3f068ee7d44dc130ea07bc42011c3ed31953d8f524e8b045165e7cbb27e
- MD5 2ae424a71e4b7a0d812b27c9b4cee611
- SHA1 f8f23efa7b25dad4122552d00e9bb6b32119a872
- SHA512 0b635026a7890b09815e5ec408f1b787c64ef04c400927d68db0a3c4e5f2b2060c4826eec0f1df56550ef58ebcc03d2be7f6178eb6889486279d24ec5cf1ab73
- SSDEEP 49152:XwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:gCd1cNn4p/X0fVYtBGt1GK3
- TLSH
  T1B7E5386B9F33A81CC17F807215BF69502530FB97B8523DFAE3945B741BE9861178A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftIOKit.dylib
- Size 44KB
- SHA256 66fc42a414c7e61490935e329ceaa14a5289a77ce348ad91cb598aa0f6cfa1e8
- MD5 ff4fec5884ae3c558600840a5a233f08
- SHA1 73b6eb70db1f3d3d159675c66904ab2c113a5796
- SHA512 2c265311307df60091ada50a8bdef8b87f3b2539710b44a8cd0b132193db3d143523675f378bade7fa6f2355d6be7a271197c5feb2fdc500a32923d2c7f714b5
- SSDEEP 384:NXT+C9eSKFr+Q8ar5JEOrSHrvMxrNab8er7q:NXtY8eJET4Pab8
- TLSH
  T19723E57F0F256331EC14D2B1C44718C118B6F2586E930082A366F5E2292EB75BA2B66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftMetal.dylib
- Size 83KB
- SHA256 d7cddda85fd12d875136c1a374c5bca76156f4139db46ce699f33c3b22472e60
- MD5 b6d97d38a44dbff92a217cf22996532a
- SHA1 cab3bfd0f5237bcc8b0eb4b4e060f2a80d7992b2
- SHA512 73ec4cf138c2af59dcbdd6ea34fffabbfb0972bce3bc803094ce6517d0a5ce80d514bd705d2c43996a90c9e78545886450c7e443f833cbaa95b13ad7fe175d2f
- SSDEEP 768:/Lbjr+chkNwxGlsMg/Knbekt+9PPGFP2Eg8eJEEPab8X:HjrDkNwxGlsMgybekt+9PWuEgXJEEPK
- TLSH
  T1A7831A832A547421CD6C517641DF2A832931B782BE12566FB3D187E65F33F8A34239EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftObjectiveC.dylib
- Size 61KB
- SHA256 8fe8db61d355407df49c7db5d82043883c7637d1fb9757f3362f8c80a2a3f847
- MD5 b68fb925e09c593f20286bd574c86e33
- SHA1 0b01cb91d8182fc34b704bd7babf61d02ee6b8f6
- SHA512 cd712bea13f9c88c016be2041e159853f2cbdd82b74c4c26f86540d06b19463752e39d719f86e9a751a27bababfbd16336238a84a1fdb55b5f9bd70790557f68
- SSDEEP 768:ZkOcK3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmEk8eJEUoPab8:2tCV/XJEUoPK
- TLSH
  T127532B636310B855C999C0B202DEA354C9E1F1C69B4292D6F7A0C5FE9B9B2703B1678F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftQuartzCore.dylib
- Size 57KB
- SHA256 3e16bcfc0c7bd786a98af49e3fd870e5499516a53a95907b9b2f123f751ea5d9
- MD5 6e743894458a1eab7f6905a923e98736
- SHA1 6095214d2acae5d65dd174e278dbd975c87837a0
- SHA512 cf9bbd229e90a999fccae13319722ac38c4eda567a8c30c0c97d1c81e72cb544088330ee2fa695a71263c89ea5b34df1567029ec266c49da44c6a26a9142ea01
- SSDEEP 384:zznYXgVbonu1r+Q8ar5JEWrOrvQrNab8erpb:zznSicnub8eJEuab8Kb
- TLSH
  T18D432A4B2B4D7121DC58A27443CA6B62B971F349FF2710DBB051A1A53E33FB4296398A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftSafariServices.dylib
- Size 58KB
- SHA256 10f1e9f5c408bac00021896b202381284e9aa2967042079250468f20165d4de3
- MD5 c39f7ad2278214ec1e7a6bc09203ff83
- SHA1 69c2221612da914635dbe9ebcf1462450fc96142
- SHA512 4f20aaef0a6e4383c35a85a430238cf4fcf94e6e869f1db84a7b0ddac9e20e7bc33e36b6190e5686c035295968e8306dac7ecc3f899781dd515ec05cb2049ebc
- SSDEEP 384:Zhk/Xcesr+Q8ar5JEOrmrvQrNab8er8oQ:ZhkEr8eJEoab87oQ
- TLSH
  T13F43D78B07983571EC4C617856CB66019E33F3456FBB0099B0A696F03BB7FBC19564E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftXPC.dylib
- Size 45KB
- SHA256 f0e5f522cdcb2af8f1a4d8b75d71fa65f3676fbbcebeb83495f46135672f6258
- MD5 ede726977edc8172fff71ac0dd447b1a
- SHA1 60782446f80f857a2b5256a3416c18ab0fec9534
- SHA512 ed74448e77fe9fd511be4240715081a99d641611e7a67e9a194cfc2b536c45149c7d99efe1514feee6c64f8e177ba0c95d45fad23437dd39d0cad5b983b0bbca
- SSDEEP 384:9zY/PHP/L207sBfr+Q8ar5JEOrsQrvMxrNab8er:9za/i0kZ8eJEzPab8
- TLSH
  T1CF23F84727243852EC894076018AD24289F3F2547FA6109FB1A694B01F73BF67E5F6DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Frameworks/libswiftos.dylib
- Size 71KB
- SHA256 663f5237a11e3e302554ec6d519b3c7c302c322020cbd657c5eb9d3583f444db
- MD5 893c1d8e2ab863cb167815fbd95d2d8f
- SHA1 18d04426936c1a117dba956ed2f23090dc962588
- SHA512 7bbf6b59f0b0e090f35603f7cdf58b884759c85af04574e3dba56cbbf2723c7180aa43d2e5e40cb5162c3a3e9d520c8b238e392331c731d7ff96a1255b11e7e7
- SSDEEP 1536:tEvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwyXJEXPKl:tEJHmXGP
- TLSH
  T14D635B9B2A28B424C49C907B074E57637F72F14E6F051099F3E8A5B17FB2FA2151728E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/MacOS/FolxSafariExtension
- Size 78KB
- SHA256 f7cf5b7d2a12fa5a526a6d26c7904478c34a8a0b38560d86e2511790df909745
- MD5 f217f46ad5b225ded3bde400c81b28e6
- SHA1 8a50a81b480391a406c3893db076f2da96c7191a
- SHA512 a843691388482019481b9aef578819f6de5c621072517dc1f23044929dbf9f3041fc8e31f8c51c4d838c960fd44d63228d337c22f6d042edb0f884b23a2327a2
- SSDEEP 768:N952LFTSkQqRu8iEM8M1xIU4aAtd48eJEr6ab8:J2LsuwV4aAtmXJEWK
- TLSH
  T176733B472BA8459ADC49C034C24FA7538631F65AAF12725A63E0C1A07FB7BB5370B64F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Folx/Folx.app/Contents/PlugIns/FolxSafariExtension.appex/Contents/Resources/script.js
- Size 2KB
- SHA256 d577d09c5be93760deb2347fc606cfb325867fd031c9bb43e0b2d4c464ee57c9
- MD5 85c4858cd00c2b05b71dafe5163eb640
- SHA1 82cc7506db2aab4332b38209b9a3197aaaada178
- SHA512 040954536f6cdfd78925d5670742edc3ca1682cb9f57faa4b580957f274c1b4b65db2475c090dde91eb6d4eaa19288ea04fac6a486a783ac82a84a32e3b54825
- TLSH
  T15851A1A06D6720AA771BD4B91B6F7249E2B851432909DC007C2CA9400FB0F3126FFFE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Folx/Folx.app/Contents/Resources/FolxAgent.app/Contents/MacOS/FolxAgent
- Size 110KB
- SHA256 45eabe2c5ff70adbde4966a89033dca0f11072195fbff6aba26287a843373109
- MD5 dc1eccfccc186ba809eee3c5098e20a8
- SHA1 fd61f13bbfd2ea974a3e3025a4081d493ee018fb
- SHA512 dc3cc7ae231fdf451fa3539b3da13035b33456af3377f9b95f1fdd013a9b42961b6f4994d33f1415ae8054f96ad3a9acd87d773f52fde03755711ede4052518a
- SSDEEP 1536:gnpbQlQJjNBzccOVjmLsvj1J5Q2fYk32GIIVV0JeyrtNSXJEbPK:ejNacAZvQIYk32GIIVVXsNK0P
- TLSH
  T1E9B318972760548FD8D9E539C2BF970782A0FDEA6E28B20E42D141496FE0DF16642F4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral23
- Target
  Folx/Folx.app/Contents/Resources/FolxAgent.app/Contents/Resources/en.lproj/Credits.rtf
- Size 436B
- SHA256 b4386fe1cef65cd91e6c8ecc065d117089083f91b7cadbf0c3e5eae20e8b9640
- MD5 f0d4a61caf597423ff07c5e9b24a345e
- SHA1 60a248148b319de26e36424d25021c2488e23ce8
- SHA512 e361011499cf70fc71e247fdda71f49d913654a983aa4ae67d00dc977e53b9cf0d88d4d2ac07efe248261c3ab6e3345e829e22dda3e51dccc221a94c660ace69
- TLSH
  T1BBE05CB3E4403573628720033C9285391DA48B31E3465C4EB020F8C76079095F311CD6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Folx/Folx.app/Contents/Resources/FolxAgent.app/Contents/Resources/folx-chrome-host
- Size 74KB
- SHA256 c65da5a7069f9046a7f5e890c6b61badd55974814b7de16c9b452f71805b00f0
- MD5 6dd0b88334b5374f008548bbecdd5cd1
- SHA1 aa4d4a22cf9083c01f2771f55c506462c0737802
- SHA512 cad08b146e72e548cd580abb74f08404a92b1b4e6651eabbe1a35fcd3634605aeb63897cfce50d0d202b040fac4708df8818d94df844da7f4c5942fb52dc5c2b
- SSDEEP 384:iO91pAfjoDzzlgh7eNdCucZGfRCpqIyzDSEttKxaB32O7i5ZHr+Q8ar5JEWrny1D:i0AborlEcRCtgO4tKcqh8eJEbgab8
- TLSH
  T1E7734A136BA40597FCC99178929AE313D631F7A8AF91611A03E0816C3F91BF7770A90F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral26
- Target
  Folx/Folx.app/Contents/Resources/FolxRegWindow.nib
- Size 13KB
- SHA256 230be7e47061771a5dac31bcc7d6601aa17ca99fd3f6bef5c90571a18244001e
- MD5 976952395c8a506f6e3b1af176d4b7c3
- SHA1 8b632c0b3672032d7c11c3d70b642d4567753285
- SHA512 1e3b5c7811e30928f21005a2d4d0a4ff6e0933f5685097a3663499adf2b1fea42ec040f75c0f7b413faa0e1cbd03b45f77a195b5f076c0000d57f592f61597c1
- SSDEEP 384:YgBdxE0VFwRUYNg7x8bsVs7hPiK8HZOBnTWV:Yg79uRUYyl67hPbY
- TLSH
  T141525B5573FBD2A4F5BBE634B1B139434B2379228B7C218E90C2BF0150A4A14E6967B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28