d3834e62e862c16e301c6336d168c238eb5c6a3c0c41885ef2df44608bb769c5

Sharing

Copy URL Twitter E-mail

General

Target
DiskMap2.81macOSFileCR.dmg
Size 11.2MB
Sample260708-267zzabs7z
SHA256 d3834e62e862c16e301c6336d168c238eb5c6a3c0c41885ef2df44608bb769c5
MD5 000be23efaea048d3ce35bf3e91e1121
SHA1 dcebdcb4ad688c73ef5d87310e79a61648c530e5
SHA512 7358fedb24e30eee10a8c7776f577451ac2ae604e578ab07719b4328f10750520105dec2cf21859a880533fa5a1b8b7c5a34b71da240f8568f7a49284d4fac4c
SSDEEP 196608:rZ5A2+ZgBUrY1jYrAc8Xp/pnQXecm0vGr5ZVNA5ZVNCC2r2NW09:N5ArZgBUrYpYkc8Zhnkecm0va5ZVG5Zv
TLSH
T1C3C63371738A79E1E8DCDB7104EA07919D68ACB3DF23112356A5B4B8B27AF189D30F50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DiskMap2.81macOSFileCR.dmg
- Size 11.2MB
- SHA256 d3834e62e862c16e301c6336d168c238eb5c6a3c0c41885ef2df44608bb769c5
- MD5 000be23efaea048d3ce35bf3e91e1121
- SHA1 dcebdcb4ad688c73ef5d87310e79a61648c530e5
- SHA512 7358fedb24e30eee10a8c7776f577451ac2ae604e578ab07719b4328f10750520105dec2cf21859a880533fa5a1b8b7c5a34b71da240f8568f7a49284d4fac4c
- SSDEEP 196608:rZ5A2+ZgBUrY1jYrAc8Xp/pnQXecm0vGr5ZVNA5ZVNCC2r2NW09:N5ArZgBUrYpYkc8Zhnkecm0va5ZVG5Zv
- TLSH
  T1C3C63371738A79E1E8DCDB7104EA07919D68ACB3DF23112356A5B4B8B27AF189D30F50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Disk Map 2.81 MAS/Manual install/Disk Map 2.81 MAS [TNT].dmg
- Size 9.2MB
- SHA256 6ac0e6af817af9145c91b4b3ed6616e567257af006cb0898682c80307a76f6e0
- MD5 f45c6d32342fd20523e187dd368146f9
- SHA1 fc7f517bcac990acb4aa4062589dab9c53d62e6e
- SHA512 344de26f30acb794065bfaac4aff68509b73b536e7b2a096ab3659b875f78541086d9a16e3b0f174a3bfec19edb1826c64812a5dc2e24969dbffe0bd11b594d2
- SSDEEP 196608:jA2+ZgBUrY1jYrAc8Xp/pnQXecm0vGr5ZVNA5ZVNCC2r2NW0:jArZgBUrYpYkc8Zhnkecm0va5ZVG5ZVb
- TLSH
  T101A633B073C6B9D2ECACCA7145CA0783AC985CB3DE232053977295ED617AF589A30F54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Frameworks/libCon.dylib
- Size 473KB
- SHA256 b2ab61b5c5425784e92ed7c22a4d5859a774d8e4ae4f13231c83622d76ea989a
- MD5 bf2d96c4ba77a2c2893100035e987891
- SHA1 c6f2cb894d0930d13aefd695536c03464636bbb6
- SHA512 99c344ec57834f8a2b9a0924a79d12f5a795b6cfda0e8998ca08610bb3ecd476299a6e149382cc43f3a6d267de5c66b1d8194ab7501b7b36419ce3b032739592
- SSDEEP 6144:rXi69tbBTLlbqlbalbRL65Om/wY3Sx8xx8ux8Hx8Dx84x8p3EdE9:rXi69tbBTLlbqlbalbJ65Om/wY3RE9
- TLSH
  T1A3A43A89B1047AD7E34C9A364C2FE3D83796E94E5CBCA0AD1856F75B60071BF0B688D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/MacOS/Disk Map
- Size 4.6MB
- SHA256 ed87719a2790fc140a1a930e5e4f5772df47a8883e244ee530e8f9ba0c81cf87
- MD5 cdcdfd8010bf877f7f21e0df337e9fb6
- SHA1 2c75a78cafaf00fedb1269c0cdb670d4ec82d578
- SHA512 8e252aa822046e0cd034104eaab583ea163041d0be6d01b0abc9c776d69e0a83e721628a13f11a24ca7b896e3325dce4106b3d05798427b7ac673f8afe775e86
- SSDEEP 98304:MS2Rl6P7cX+4iySp9eHUacRWOOEnK/InnsnSZLVlQd/FP1+OH:Md6Ih0876Winsn4LVlQzP1+
- TLSH
  T1E736AE27507C1C38C186F23C6A5F43217762F9A80670E7AB2DD671782EA6ED15239F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Resources/icon-compressTemplate.pdf
- Size 4KB
- SHA256 393b0040108a382d9a65a176029484d0a519d286423b587d1101c30076754851
- MD5 8a090ec4ca2093efbb5d3853f65982aa
- SHA1 6d75aea6a31c9f2bd035f28cd474bd74d943d81b
- SHA512 58f45683fcc57da32e0e08a9bb480d087d8b79b6c519d2346a27f93e17e9824eb0c20a9da48e875a27393ddc31ca111627f8513ee4217add824eed5f8a35ae35
- SSDEEP 96:4OhwHOebVLV0BXW9iKgJpknIy5vMY8YKJTdc7LR:4M6VOwfHnIyaYGEvR
- TLSH
  T182912A11C8955D0DFC16CE42C42F3FDD47ACB44644CA24A6512C5A42F4AA8D5BDAB1EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Resources/icon-ignoreTemplate.pdf
- Size 3KB
- SHA256 4cfd379b36b797eb5d377bc635458ee65160916e42bda8fd9f79fb410e1d39c9
- MD5 6af6857d0fca4d64511fc917a5ec1e26
- SHA1 31738d1b406710cb9698450486630dbdccc9af0f
- SHA512 b3fe26df895bf51cbd2760cb383fee78ba8174bab0c84f967167993aa431dbbd2d9f318ad1d2918feec8a8909bf8ee75e675eb4b7d72c6dbeb1299b18e7ce189
- TLSH
  T116811A2599995D4CFC16CE46D43F7FDD1A5CF04348CA34AA001D4A06B46A98AB8FB0EF
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Resources/icon-reloadTemplate.pdf
- Size 4KB
- SHA256 3542ebca35e7e3ff1cbff67229980d8d09a0e22ac7378c6dc3fb310ca7a2e2ff
- MD5 c2d9c0d77035920f618a13126ea94679
- SHA1 e4d9d36abc57d92b9fadee3c4eb79f0892a711a1
- SHA512 1cffc5f43441497e3b044d9ceb62d8d26b365484e86cac70c97072ace21f514afb042480d0ec7874c5e11d43f456d1f9e287384ce49f5ba12b4cd4bdc608ff73
- SSDEEP 96:4+orJ1PtPWbVLV0BXW9iKgJpknIy5vMY8YKJTdpLLHGC:4/CVOwfHnIyaYGxfHGC
- TLSH
  T16D910955C8E94E5CFC16CF42C43FBBDC121CF44659DA28A9051D0A06B466899B8BB1EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Resources/icon-trashTemplate.pdf
- Size 4KB
- SHA256 6d82f045846c5b301f6106860af896b67031becfd8c98c382124166ba64c9278
- MD5 7921f3efd46e875c26c2d93f2322196a
- SHA1 59e1d36cd0bcd573c5b5f0136e6b5238165cba9b
- SHA512 c9d6dc5837368ac5e6b20e55dd6e2c8049151aa47b6c4af9c4132dd1633da284a056c6d7daa5293ccd4c02181842fcda15dd51914aa2851544e718601014d469
- SSDEEP 96:44SsjrVVbVLV0BXW9iKgJpknIy5vMY8YKJTda0LU+:44TPvVOwfHnIyaYGy4U+
- TLSH
  T1C0811A25899A4D4CFC07CF82C53F7EDC029CB44609CD74AA112D4A01B499C85B8BB5EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Disk Map 2.81 MAS/Disk Map.app/Contents/Resources/icon-zoomOutTemplate.pdf
- Size 4KB
- SHA256 adfef1c856e900308cd74cf73b996dda87be02fc52c1c21ea6a1d89c65618786
- MD5 2263c4601181b35da7897425484504b9
- SHA1 e21f359a4733774395aba7472484473bd3efe63f
- SHA512 c960a5c59a26b8da48517ec987eea29905c62e3c5c79a203d729ae141efe9f597565895931418ac6bd25c124af5cbad564d7bc12ef53008a0ec360082c6a779d
- SSDEEP 96:h5RkF5VlNGbVLV0BXW9iKgJpknIy5vMY8YKJTdj4Ls:PRkzAVOwfHnIyaYGrcs
- TLSH
  T11D91F821D8995D5DFC0ACE46C92F7EDC13AC700215CA34AA502D2E01F4B6885F9BB5FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Disk Map 2.81 MAS/Open Gatekeeper friendly
- Size 1KB
- SHA256 45f8b43453cb19232902844bfde4af6471f3762880f23e968bfca28a33c26817
- MD5 dc9fb0fdb63b80375e7fdd5f67022847
- SHA1 55437344bde13777a3e309599aa6c7930721d4d7
- SHA512 59f501c0b2843254f97e1c7492c295fd0cb41ca024b92cee617db471ee815aea823969381c95a7ab7a581957e2964673e3e0336ac02233d7dc0392cadae78fd7
- TLSH
  T1FB3111B2B259152C2502127F9F45FE2E7EA781FF1B956B2840801C7A22D2068A57E945
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16 behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18