5e1aa2f8e714a3a77f8edd3b8ba3cc2f365fcb4bd11ce5e92e11d42a7bcb0919

General

Target
MacKeeper.6.11.pkg
Size 122KB
Sample260628-3gn18sgv4x
SHA256 5e1aa2f8e714a3a77f8edd3b8ba3cc2f365fcb4bd11ce5e92e11d42a7bcb0919
MD5 65df3860c5d5c8868b99b8914f8f3694
SHA1 403ead9426f79fb39ecfa9e1db8096a8285b0f1e
SHA512 da367e125e6f989aefc5927ba56864a349816ffcffc62e525d8bccbec21e380de2fc25999332c28cbe6977b715f00a0c1bdc9ce342c29d690777cbbca77f0905
SSDEEP 3072:dbGTYL9AXCBr3iVLcOXSBeTynESpj48QUTw7:dEYZSCxiVdXEOvKcqU7
TLSH
T107C3129E8F142021EED7D0F852C2E0A27E72F2E86FA71031F55586C92793BFB5632558
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  MacKeeper.6.11.pkg
- Size 122KB
- SHA256 5e1aa2f8e714a3a77f8edd3b8ba3cc2f365fcb4bd11ce5e92e11d42a7bcb0919
- MD5 65df3860c5d5c8868b99b8914f8f3694
- SHA1 403ead9426f79fb39ecfa9e1db8096a8285b0f1e
- SHA512 da367e125e6f989aefc5927ba56864a349816ffcffc62e525d8bccbec21e380de2fc25999332c28cbe6977b715f00a0c1bdc9ce342c29d690777cbbca77f0905
- SSDEEP 3072:dbGTYL9AXCBr3iVLcOXSBeTynESpj48QUTw7:dEYZSCxiVdXEOvKcqU7
- TLSH
  T107C3129E8F142021EED7D0F852C2E0A27E72F2E86FA71031F55586C92793BFB5632558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution exfiltration persistence
- Exfiltration Over Alternative Protocol
  Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
  exfiltration
- Installer Packages
  Adversaries may establish persistence and elevate privileges by using an installer to trigger the execution of malicious content. Installer packages are OS specific and contain the resources an operating system needs to install applications on a system.
  persistence
- Queries the hardware information (I/O Kit registry).
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
behavioral1