Overview

overview

8

Static

static

1

pearClient2

macos-10.15-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    pearClient2
  • Size 63.3MB
  • Sample260629-24wtxshv2v
  • SHA256 b2c3dbe5505e7bc7dd84044d47ac1f2b54b7bc8e508da4aedcd277847cdccbd9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutionmacospersistence

Malware Config

Targets

    • Target
      pearClient2
    • Size 63.3MB
    • SHA256 b2c3dbe5505e7bc7dd84044d47ac1f2b54b7bc8e508da4aedcd277847cdccbd9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionpersistence

    • Identifies memory size as anti-VM

    • Identifies physical CPU count as anti-VM

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks