Overview

overview

10

Static

static

1

filecoder.dmg

macos-10.15-amd64

10

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/....dylib

macos-10.15-amd64

1

filecoder/...atcher

macos-10.15-amd64

1

Resubmissions

15/06/2026, 16:42

260615-t7qs3sc12z10

29/12/2023, 16:37

231229-t4vmvseccm1

29/12/2023, 16:36

231229-t4n53shfa71

29/12/2023, 16:30

231229-tz8zpahfa310

07/12/2022, 15:20

221207-sq511afc3810

11/03/2022, 16:29

220311-tzk8madceq10

11/03/2022, 16:29

220311-tzg6zaacb61

04/06/2021, 11:31

210604-wjcgrmw7fe10

03/06/2021, 17:10

210603-ha3r6tyzpj10

03/06/2021, 16:17

210603-j3xhhrl8fe10

Sharing

Copy URL Twitter E-mail

General

  • Target
    filecoder.dmg
  • Size 2.5MB
  • Sample260615-t7qs3sc12z
  • SHA256 f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
macfilecoderdefense_evasionmacosransomware

Malware Config

Extracted

Path

  • /Users/run/Downloads/README!.txt

Ransom Note
  • NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption method. What do I do ? So , there are two ways you can choose: wait for a miracle or start obtaining BITCOIN NOW! , and restore YOUR DATA the easy way If You have really valuable DATA, you better NOT WASTE YOUR TIME, because there is NO other way to get your files, except make a PAYMENT FOLLOW THESE STEPS: 1) learn how to buy bitcoin https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version) 2)send 0.25 BTC to 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb 3)send your btc address and your ip (you can get your ip here https://www.whatismyip.com) via mail to [email protected] 4)leave your computer on and connected to the internet for the next 24 hours after payment, your files will be unlocked. (If you can not wait 24 hours make a payment of 0.45 BTC your files will be unlocked in max 10 minutes) KEEP IN MIND THAT YOUR DECRYPTION KEY WILL NOT BE STORED ON MY SERVER FOR MORE THAN 1 WEEK SINCE YOUR FILE GET CRYPTED,THEN THERE WON'T BE ANY METHOD TO RECOVER YOUR FILES, DON'T WASTE YOUR TIME!
Wallets

  • 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb

URLs

  • https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version

  • https://www.whatismyip.com

Targets

    • Target
      filecoder.dmg
    • Size 2.5MB
    • SHA256 f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionmacfilecoderransomware
    behavioral1
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftAppKit.dylib
    • Size 103KB
    • SHA256 aa78b2a8e968902309b2064079f8fbe55cca6d2beef7a3dcdbf715b6be86e49b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftCore.dylib
    • Size 5.1MB
    • SHA256 c74cd121724b3bf1baa16d03e05f2891a8510a6aafeaca7078c6160012d4c7ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftCoreData.dylib
    • Size 100KB
    • SHA256 f5f852b747fe14e6c70446600b623c826a0067f3e533c7768e3b9f6b0630531a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftCoreGraphics.dylib
    • Size 152KB
    • SHA256 7526c00e90c0183e142f0e22a601a1d56e18ba8d78798d942731da2c5c775feb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftCoreImage.dylib
    • Size 34KB
    • SHA256 b558cff34f77795bdcf961f27a49d505c2614d0e1f2ced9dd81268cfa8b94497
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftDarwin.dylib
    • Size 65KB
    • SHA256 34eb1e1bd570320109b83c59b1007ba32783f7a687cb3e83e6a08bf79f7d32fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftDispatch.dylib
    • Size 339KB
    • SHA256 398d271a85b93050c9e4ced5130404130fefee8c9088828460a7459f4aae3936
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftFoundation.dylib
    • Size 1.9MB
    • SHA256 fde286480b766182566d760b1f7776a0c742c4787be2def239bf0c0cf2ab9798
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftIOKit.dylib
    • Size 34KB
    • SHA256 dfd7d9f26e409201f62a02b20b2e21197cbd581ecf214708f507f1bdd2c63362
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftObjectiveC.dylib
    • Size 56KB
    • SHA256 e2473a17a91c88370505ca1f4053e235ae869055a2adf9215bba9864c947bd9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftQuartzCore.dylib
    • Size 47KB
    • SHA256 3e6a3e04c55693a513c19e84fe1f44132141161d7a96b4baf245999a4de36d7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral12
    • Target
      filecoder/filecoder.app/Contents/Frameworks/libswiftXPC.dylib
    • Size 35KB
    • SHA256 64b4f3a686b69eddcb75cd198af5ca5dac2e08b775d291f9f01a5862fd27a971
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13
    • Target
      filecoder/filecoder.app/Contents/MacOS/Office 2016 Patcher
    • Size 52KB
    • SHA256 91af9a4c0091f8e97641660c66d414fa13ee69473f5692d2aecb1d1101ed34b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14

MITRE ATT&CK Enterprise v16

Tasks