d694515b0081117144ab56645d7ab9fedac2cdd579a9b9727fa8ab8990b7a9ca

Sharing

Copy URL Twitter E-mail

General

Target
Install Parallels Desktop-u4e1loow.dmg
Size 5.4MB
Sample260715-e77n9sew4w
SHA256 d694515b0081117144ab56645d7ab9fedac2cdd579a9b9727fa8ab8990b7a9ca
MD5 4aaa5daa75a94ee2a7f2e4df06dcf0c1
SHA1 c7d828bb038fd514d8939a00957bf36cd2cd990d
SHA512 59d334202608cd0f15af215f97c7f77ced8a557526b1cc7e50a57848efa84e4d18d29b05ae3de78b142ab82fa0f704aaf9308ae53839d6e301716ed81bb81738
SSDEEP 98304:27dUZ2SHEPFkKAMD0Ef6wYxA0Z3U3PNOkqDXfYKqw1C01zWF1RK6ce7euebofLLC:27dE2zzAq6w8A03OQkqDXfH1z1zWDRKt
TLSH
T14B4633B6305D1C21F64869F29293B70F0CF4F94F6F5510085C97C3E6BA99AD3ABE0929
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Install Parallels Desktop-u4e1loow.dmg
- Size 5.4MB
- SHA256 d694515b0081117144ab56645d7ab9fedac2cdd579a9b9727fa8ab8990b7a9ca
- MD5 4aaa5daa75a94ee2a7f2e4df06dcf0c1
- SHA1 c7d828bb038fd514d8939a00957bf36cd2cd990d
- SHA512 59d334202608cd0f15af215f97c7f77ced8a557526b1cc7e50a57848efa84e4d18d29b05ae3de78b142ab82fa0f704aaf9308ae53839d6e301716ed81bb81738
- SSDEEP 98304:27dUZ2SHEPFkKAMD0Ef6wYxA0Z3U3PNOkqDXfYKqw1C01zWF1RK6ce7euebofLLC:27dE2zzAq6w8A03OQkqDXfH1z1zWDRKt
- TLSH
  T14B4633B6305D1C21F64869F29293B70F0CF4F94F6F5510085C97C3E6BA99AD3ABE0929
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Queries the macOS version information.
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
behavioral1
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftAppKit.dylib
- Size 217KB
- SHA256 768f388d5d95f082b59498bc45817301f0f5548c8cf09439e346efd085437793
- MD5 e847bf74a19bd19732827bc48d7a7c7c
- SHA1 fedc233b23c2bef9bc5b7ffcbf338079178122b4
- SHA512 ddc01a70426d566a67300048ca7e86c1139d5482310d8dacd7ecc3b24068ee521aeb9437f0f190e8e64b5f3aed3ba5868bdb44aadded2c2181f05ec9bf4d0a2d
- SSDEEP 3072:n2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNru:ioFP6r0vpGT8Ma0Uyd5
- TLSH
  T112243B4723715E3BD66BE039CB6FD9080B24F6429A2613AED7A45531FEA57221B13C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftCore.dylib
- Size 6.2MB
- SHA256 4644020a3a00718f1c914e14caa01ea6e0ec5bddf816410929f3132ad6c97769
- MD5 00d8564f4b19d37d136c81b61250f251
- SHA1 219cbbd1549f3546617035e94d829101ef6e0736
- SHA512 0ef951e60e1a261567cad9332fe0db0f6e106df32df2806b6db30df838f59db9308f98c89cf47d1d08cbff0b639d77c51126114a6d6ec83ae015e1575bc349be
- SSDEEP 98304:LgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:Kolt7iI61wgwAm7Ag
- TLSH
  T15D567C3F65A29D0DC2ADD070498F7A022871F4B157563DA417C4BA3A6FBAC91270EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftCoreData.dylib
- Size 96KB
- SHA256 96ee4f71fef4c4a334f8a0fbb50fe9df1ab37ac7c94dd1c6ae38ffbe6191c491
- MD5 4638ee76408b4511b341971cf9d6cab7
- SHA1 0215ebeff8427bd11272bb360fff76b4634fff99
- SHA512 814d375fabaaf1c1598c44c807791c7db56502c079981488b6f940fc5a35f48a88a3217cdc691e64866d8a3decfad37435ccb1b5444a90ef0ee5632463371053
- SSDEEP 3072:FSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kc:YF1bN
- TLSH
  T1EFA384970BB6343BCA6A123341BBC9326870F90B2FD669B697A14DF0259F664370750F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftCoreFoundation.dylib
- Size 41KB
- SHA256 708f8e6ce5fa38d7b93484a46b250a36bedacf79a380e3b946c37a262f7d31ed
- MD5 bdde1e0eede5ce9e50eeb50566c34933
- SHA1 5deb568be1adcfe10a147af3d796bc76c7d26503
- SHA512 d5f4cb28dadebed5ba3db44d388e6cd4d245405440ac19f454cecf9ab9cc5c271bce339ed6fc655c4f62b14918fa2578b29d99878815280ec9b11a82b4f4db3b
- SSDEEP 192:SzHzqsMDWrSTti1PgeYzr+RjG8P0wzraxJdczrCbMRxhrK7JsQqrv75alZ8P09rc:SzS3aPg5r+Q8prbrB1rKFqrNab8erc
- TLSH
  T15713199707583421ED5D99B142CAA282DE32F3893F73106AF05AD6F02B33BB41A574ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftCoreGraphics.dylib
- Size 186KB
- SHA256 5d7019b97043d6e2f55cbe81b8a971739cf106fa8835823001e2a5ea4eb27431
- MD5 f32d8adad56c4c600a310430b9812a6c
- SHA1 fd1f93227b4321b1eb9eda965521f2c45270e8f4
- SHA512 d377196bc0b7b7b8f3829960a746f78d402d9a6900db872b685bea7b8795a228a53b60fcb86e686d2f66a2d3d9c948d3f77d390f3c9ce00812446b36fcfbf9a9
- SSDEEP 3072:La1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbOLZ:u1kJvHXD5LDAya
- TLSH
  T1CE14D55BF6622C5CCC6DC8704E9E22513015FDF827A24B5EABF051357A66E306E12BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftCoreImage.dylib
- Size 49KB
- SHA256 5d10a57d2d78c10325bca7dd771c17268fab7152263264c3eae3d83db21a07a7
- MD5 e5899ddce7740ca17f1cbfda14e18d0d
- SHA1 3092536ce6f413ad254889c13f6833696c2c8e5a
- SHA512 56a6009f81cdad3c2598f22b69c8139bbced8ddcdff2ff55505a7000260438a38cffeed648a1f55ca0e765d725923065e6a70559cd7e04f46ae124fbfbb3c64a
- SSDEEP 192:5p8Z8WX+3e/kxhJCL7Yzr+RjG8P0wzraxJdMzr0kVNhrK7JsQqrv75alZ8P09rhL:5CnkvI0r+Q8przrzrKFqrNab8erhN
- TLSH
  T13333F99B07783172EC98A6B456C9A3429E32F3957F63006A709681F03B33F791A5A5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftDarwin.dylib
- Size 97KB
- SHA256 e5886cd6d1efd2ed318109dec9063cc1e243bd441dbb217cd23f74717969c347
- MD5 91a0e8a8edca1fb428efdc8bbe377406
- SHA1 cae815148a49ab25175083af2eb5e92ed441a27c
- SHA512 e2983b26ca6670467127cb32ff92f35d917344ebbdaa49db5cf2f94205c615ec2eb160214097f0d7cc07bb2c61b67a5bdd4e0cfb2e900fd44c0a40cd278e0f9d
- SSDEEP 3072:7cicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIohem:7cs1elxD8DBnVK4rywrcXARZTFW6D5BL
- TLSH
  T1A5A3F69E6E63B827D631D835C8A767918933F5B84F1236195F98F0BE4E32BC0364191E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftDispatch.dylib
- Size 320KB
- SHA256 88d85c988f1a83d6b04dd3093902f2c1cde730437acf86464491adfb2bb277d9
- MD5 1e53de6e64f9206e16177fd09638ede3
- SHA1 9c2e9f510f9a5cb60b9d1a57804b07221cc876e1
- SHA512 b357d8db6503f426041fde94234a6a71bb440537fd3d1a2fc13c12e12aef7695ec9cf20ed9baac195ece9046e1581ccf99b3d37064eb6c017a8dfbe4f0bbaeaa
- SSDEEP 3072:Fo5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQPU8a:q5R9iqOEcKbAgHMWbBZ7oS1baja
- TLSH
  T12864B5FAD2E24E24C4348078837F79221723F47193712768E764B2A56E7ED546E1FE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftFoundation.dylib
- Size 3.0MB
- SHA256 689494923c436948e254c7b91672342e4259a2650cd37a85ca8c6f81ec9d8d24
- MD5 94e455bb57ecab5e10916ae25999d2e6
- SHA1 51a63c0ee3ad1d7d16f16c89a77187eab89b51d4
- SHA512 edac1275dd128d6eb16739a98f14f50a358f3e95c64016be6f8d935b81883ddc930b8cfb9cfda2106099cfa00ef7180344a436e2c6a0473a94f57647ad8c1b31
- SSDEEP 49152:TwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:0Cd1cNn4p/X0fVYtBGt1GK3
- TLSH
  T17BE5386B9F33A81CC17F807215BF69502530FB97B8523DFAE3945B741BE9861178A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftIOKit.dylib
- Size 44KB
- SHA256 09dc8bb128f6621500314cf7023c5de3a0311f671d12674d21c35c7751c3a8f4
- MD5 9e0540f34101d819c5fd9ea8610be27c
- SHA1 169b30c413eb3fde227cf8ff6467565a7e7f4ca2
- SHA512 ce1aba44df3e2b3d38f6f4e78a84285e4dd210b795a6c76d873f27794567928862dda82f25f27e93c9713fb4b996ffd73ca11fe37b1b94768dbe70e01ee6e80c
- SSDEEP 384:NXD+C9eri0lr+Q8przrrpp2rgYdKprNab8er:NXMiu85ydAab8
- TLSH
  T15423C57F0F256331EC54E2B1C44718C05D76F2285E930092A366F5E2392EB35AA6B76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftMetal.dylib
- Size 83KB
- SHA256 620dcab81d5350fc965a717de13a4f58f1ebeb78814e8a7c54525e6d14baf4e0
- MD5 058b9d5d62b4185943d8c2bb4c3862d2
- SHA1 b9aa70850bb931bdc6cc258652d2a15cc568e279
- SHA512 806d2667c6e73c1044c1f5224eebc976d8b832e5630937857befd43ea303687a9468e7d19637080f56fe1423643b6a54f7c94e80342d006e5aa71dd39e6cc459
- SSDEEP 768:/L7jr+chkNwxGlsMg/Knbekt+9PPGFP23XO85mdAab8:njrDkNwxGlsMgybekt+9PWu3XOQrK
- TLSH
  T1B6832A932A547421CCAC517641DF2A432931B782BE12566FB3D187E65F33F8A34239EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftObjectiveC.dylib
- Size 61KB
- SHA256 7ac69e7b608548bcc6b66a898e2604d0b4596857edaa509a45db55aa6f75f7c8
- MD5 c1658593a9e4e75986532fb14cb0dc4e
- SHA1 3ad15e9dd150e9c0d65c995c2d0f9b9c80628cf9
- SHA512 7514a339e390c09a88290f0c3e7ced187a5f61304b2c9fd65ff3cb10af04a4ed14d2f66ea8f42c28088a153dd981a6e77c60f4cafc60ce03811cbbcc3a616421
- SSDEEP 768:ZkO8K3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmEf8pdAab8:WtCVMjK
- TLSH
  T1AD531A636310B851C5A9C0B2029EE354C9D1F1CA9B4396DAF7A0C5FD9B9B2703B1678F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftQuartzCore.dylib
- Size 57KB
- SHA256 7aac1c1e2bd57927ff4041ffee6b27d1f7ee478d876aae3dbce285b6b7a5e272
- MD5 05d0658ef06739df2963907648858a55
- SHA1 4bb9ffd7050124499b57faffbf12e13f91ef3cc2
- SHA512 ff7c9972c8ae7d0b53b45ae662e6848f253e3bb43bc4da9bced2114417d1318c430ceba075b9a97cf2a708d1df45232512de270b9045a9a4409b2587590df8e8
- SSDEEP 384:zzXYXgVbouMr+Q8przrialnrKFqrNab8er:zzXSicuW8QaVab8
- TLSH
  T167432A5B2B4D7122CC18A17443CA7752F931F349BF6710DAB061A1A43F33F78295399A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftXPC.dylib
- Size 45KB
- SHA256 306f766763f2bd8daf0702f741fea8511dc4adab486489390eb2c41064f8cc5d
- MD5 4dd440b60b434492f1e361dcf38842c4
- SHA1 93254bb8428d328052cc546bd73ef45dbb16c4dc
- SHA512 13462fd6778c608ec96e0ec603de1bb84825fe2fa4b75d841a5521080702cb238af94b1911fac7073103a8ac9843d5a1410a513d47ff40fe81c2cf3e8c6d109c
- SSDEEP 384:9zo/PHP/L2QPksr+Q8prbr12esrgYdKprNab8ervy:9zK/ih28aFdAab8wy
- TLSH
  T1A023094727247852EC8A507A014ED24289B3F2947FA6005FB1A6C0B01B77BF67E9B7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Frameworks/libswiftos.dylib
- Size 71KB
- SHA256 d0c0bc19a2ec3766d4136190d815eafb00278613f015470b8a5e9b68d534b1ec
- MD5 e8a4e898013c7642d636bf9c8d811eb7
- SHA1 5cd59e5334baf938c520f4a5afad5283eff877cc
- SHA512 d49c7ae9791cb131bd33773cc178719988501e8a5d4945d9b57b621e82aa648f318e1398800f2be54c29a521e70b392244fcfbb701c1ce9d5fa7a6f7b88ea597
- SSDEEP 1536:dEvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwAZK:dEJHmn
- TLSH
  T17A635C5B2A28B424C49C907B074E97637F72F20D6F051499F3E8A1B17FB2F92161768E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/MacOS/Install Parallels Desktop
- Size 628KB
- SHA256 17def8aa05ad7c669a6a2094104b7586636df9794b4f95f06089a760310f7a45
- MD5 0eaab647a4335e06ea9a34334cee701b
- SHA1 baf2c8126b83280fa7225fb32dec1a840f450a2e
- SHA512 ffedcb6ae60653f0ef8159406a7c309ee5066a89dbc50809b63e0d384b8975b19e5d16455b0dff94c2bd75930f577f4999e852df4780b889ac3ea1e6e4a91d5a
- SSDEEP 6144:B1QL/BceS5rjmHvyvWZfHF5Yi6yeZljz6e9Qi43Qloe8H23KYhn3tPhERcbrPydZ:BQ/BDjvy+Myew26Yhn3NhUcbFypktMu
- TLSH
  T16BD45A572E1C1D16E0D6313E095B8742523BFD959B21E3F62E60023DEFE9DF0622A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/LicenseBetaPD.rtf
- Size 15KB
- SHA256 94d5accddec67a3cec281901ffd6e9c877bb7565477a795fc6f5e58adca07bb1
- MD5 aa3bf7f881d6143f394132e50e1bd24d
- SHA1 a8e9e08906b761bfbb17d55b10b61136e77abb05
- SHA512 75c45fa08dbdab7317db7af18eda9f12d03f635cac8f4309d2b1c72d6cbde7ef38d4761395c53f3578d13def00c21458f07a1235366c5975255f48b7d3f71600
- SSDEEP 192:hJ+RfSb5o7OfTD/0hOOqBNL5D+Q4cQpf9wM1ZwbW6rX8oLD2JVqxaXD:HTCOfTrbIPpfGj8GWD
- TLSH
  T17072C8BBBF0113B10AC2C3626AA254E5F37FC17DB79786A45468D10D2322D2883FE795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral18
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/cs.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 20997c6369794cf94a71029e805014a6004b515b4f10f842dfd9df7059a15663
- MD5 e947b144f4b28f3da50537c9b43f7585
- SHA1 3c4bafdd35fa669d258e91c652e7348fed98f4a8
- SHA512 a7a00bcb23eec7f58bc310fbeb543951c684e1e5ac98b417ee518de3eceefbb69cc3feb28178ddbc36e51d16d79a833c1e3926986ade90cfc5408b65f7508902
- TLSH
  T16E11757FF004973286CF11057991F6F86B27C364B3638A3365E12A51EA264BDB378B80
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral19
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/cs.lproj/License.rtf
- Size 182KB
- SHA256 09c6e479b24b487433e5ddabae2bc1f8ee42c97fb65d793774262b0b55fad6f2
- MD5 3490a760c3de034dc84e9f4875b2d8d5
- SHA1 b287d2a028ef5919435587865eec836b5cd42400
- SHA512 d750fbdb35c8fe33aac363517c79fd8960e9c0006c196001c2b2a2109ccce2a7c839d13f5a12be2baa4d5bd079c34ee91f226e95661bcecedf715bd1c4e61e42
- SSDEEP 1536:fNNwp3KdrOBrTCpDvraXkRWI8dTcVkQGGAObnYvNSZ432ik/EgaegPteb/:fMgOBSDlWIvYvIjEzPMb/
- TLSH
  T1CC041DAB9774DEDA7D6240C8CC3006CDCF8A9C50A7F8CCB0DB776D4A25794E6ADA4148
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral20
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/de.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 ff67137828686789e09c4223d28dd1091ed9174ef38381f24fa586b3f85ab987
- MD5 bb80f28495f33c387e6cc246de6caef6
- SHA1 f32a10bc31f4cfeea3ca17f3143144cdbe89fca5
- SHA512 e33e630bd238332218e0d0d03ffee4371c89cd464007229e17525082d4999e68152bbb6b9cc4670d7c6508772a623652cb4ac4fb756735153615595a91e27f06
- TLSH
  T1591186BAF021CB74958BB12A38719775776201B5E503D9F4B1316281C4336AD37F49A6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral21
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ko.lproj/License.rtf
- Size 318KB
- SHA256 e74c7d0b91235f99261dba0e99fa6c3f9c44352ac3f4e08b81cf81a6180a1c67
- MD5 e1e6af866189a1602caa35ca6af8baad
- SHA1 0585d80b5d7088adc7a276dcc4f6926a26147c79
- SHA512 65aa3c4e032997ef681c1c8ff3b95be8b52e0a429f907f2920f1a86700ccebcc305c0e9c3b65c6ea62359d9babc57704bfd92e8bfdf916733f5353531a1ff8b8
- SSDEEP 1536:WkIZpSoLUrkUrHwXAqCPVli9o6OqIr0X4/PqaG:xWsVQ9tOtr0X3
- TLSH
  T1AE640A6F97048816ECF9D459CCED73E7F0E2676095A710F7E8BBB4891A0344C9129BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral22
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 685c97abeb25172301231f5ed3f27b72a23eeb0aeed07b8e63030b9664924ed6
- MD5 549cc1e774482f2f6ab28256b3764e62
- SHA1 3b109c5cf0aa69026e5fd0f61ce595bf25f2aa1e
- SHA512 00cea2b64be00dd374b6eab84e266d02ca979b1606ef120891f32e29d169afd7e9b538a6467d84ee202013daf20d46fa2541c0695be9d2ad9588258a88e11fc8
- TLSH
  T1FA2133FAC491CB7452EA6810F4B6BB74BF22D1327A228576D2D17A8ED0358ED7379C10
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral23
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pl.lproj/License.rtf
- Size 178KB
- SHA256 6d2b401bdc117e754a2e76cf92a30b2d5e0de27f82796c4518c2750edf873b26
- MD5 d48bb842e460750413ed130957388308
- SHA1 fa22a72f2df559866cef741a17286d7356d86955
- SHA512 2e6fc39492a5672bec4a8f3b57949ceeb3a6b60f8736d6006d4f49135c25cbf72f1aa78e2998dc35f4b0c9ca84bae67ccfea190534f3f79256db7091dca95685
- SSDEEP 3072:lkQGW2Fzr66XP07MQDsVcpuAAqbZH3U8W2HW:lkQGPF3v87FDsVcpui9H39W/
- TLSH
  T11604B7BB93954788FD5250C8C9914F9DD0EC1880F930407499FBBD7AC8A9536AEFD2E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral24
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pt-BR.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 194eca9683ca6a00d4d5f83fd4c5532b52e5c3fc3014839a60f26ad615cde084
- MD5 601986eacff5d4e041ae9c45b8006430
- SHA1 e22b785de12c23a95032d7d155e3bb3c18c66923
- SHA512 1bf8ecf7c4272a38147c22ff7dd2d27d99b79d9a0f6ec6e9d91f081ab6bc66d3f2a194f846ecbc6e685f49c22073dd2590681b23cf969e430d077574ee4a56d7
- TLSH
  T1D31142F8D480CE78424FB42334E2F1A81B6352249A23CDF9B9602645A43408E3B34C28
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral25
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/pt-BR.lproj/License.rtf
- Size 155KB
- SHA256 d506f239fcc4ba2e4430c2059a43ad9a8ca4b07736fe560297bc0eea9f990947
- MD5 13ef2b2caf4f6dbc77b79ff2450cb236
- SHA1 533a09b5ee07a1c7b6e57db6ea06bd5841a14d1f
- SHA512 7b19f8c34bb8488595610038fb67617fb33bca9c881d18aaf3d80a563a0171f767878afce30db6b6e1c4685379d2b37e71492830b1fe32985aff98eb95a872a5
- SSDEEP 1536:l0d4JQZ4RD6ibfSK5mQWqdS5FLHcePasnXeNtrK/gjz1c23wN1vpbc:lWCM4RD6gKmmrz3LHcePjY1/y2cc
- TLSH
  T101F395B967F84ED12E0612C07F2381877E9544A093B0C5F3EAB9DE1A62DC894FDF8645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral26
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ru.lproj/CepAgreement.rtf
- Size 2KB
- SHA256 d8563f1d58ae7459316de9902611b0ad776d30ea9ccda577bf3eb4bdb31458e4
- MD5 fb35ed576cd22fa47acc2a3ea609b698
- SHA1 981e370bccd87ca6af2bef938eaed752d0a3095e
- SHA512 0d510d1590dc2d02313605b1805c48cb5c9ffde9fa787832b27f8b626e35ef9b921ee1ce850335484977c85d11e60fc6ccc495eb011fdf985b2230636470f31b
- TLSH
  T1E5514C3FD48386620EFF9ECBACE39DCAE93C49114186D5AAFD941B894B6D3487147C08
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral27
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/ru.lproj/License.rtf
- Size 796KB
- SHA256 fa4cdab67f25057d7323296cdd4706664091dfc3263eeeeaa590ca68713f4982
- MD5 77d6f2bc8a10b4dd70eb6258c87bf006
- SHA1 eb4628d06599b1e0073e1a5513354f591a49ca63
- SHA512 fe8c55344318a760bf74453a3968beff39077f21ff1dc9a4e80d3b2840f463410c6e9a35db37a9f3afbc041b1b65162e1c6157254384491b041db197d13fbf05
- SSDEEP 768:LXkQvHfzAK6kAPDd54EaEiwLrPj3mmAyhd60ikxbKBEWCiJCAN8ObaJsjRgwPg/l:tfxfOpKOn1d8uLmN8EaaGEZ+QxM
- TLSH
  T16F05036F93C08D3A17E6B50E1CBDDBC4D0F41B119526B489EE6F2D8F4D1A2B6282542F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral28
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hans.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 59756d9d9da1a4403b24d71a299bef19ae9d8e5b43f683e8e9b3d892a2ffe0c4
- MD5 faa4a6d8d57e8a450e59326f1421a192
- SHA1 17574652555947959a92d15799fe8d2abe809450
- SHA512 83df75cf322773e5484cf8f59b2311c61f8a8695a37090c75eace43d06ae3493c1838b99c80b76a2abb0255eac08d08b660e4cecf87da97ecaa10871057552ec
- TLSH
  T1CD21AA76E0359B2D80C1153FBA2BD1E87FAA460BDCFA84178E6E1707582385FD357480
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral29
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hans.lproj/License.rtf
- Size 247KB
- SHA256 bf76dd0115fe1973e5d4dc1346ab8571b24e9547a2bd602fa2fe72a30e495fbc
- MD5 6021906ab0baab9d7061b468c8f8b5e5
- SHA1 08e102c76ce42f50a67d25ed88c0a3e82117a69a
- SHA512 2896f4029b9306bcfb76c6c73f737415f90016183b3f6cd490f3c4bcddc2567673a144eeaee970f6f2774f30d7e759d889a4b56c4232107fcdb576890f1e12c0
- SSDEEP 3072:CwOKADVfwgyrZ+CYgNV4zsTUwRKJpZtTk65ZLqL0zQls+LcgwIFwtWwpb12607nP:mE
- TLSH
  T1654439654B04CB6AEC3A604D8C68DFEDC9F55E234371D0E9EDBFF242AA10058E5E2497
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral30
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hant-TW.lproj/CepAgreement.rtf
- Size 1KB
- SHA256 762fc8d21e07b78f006f13423b62e66c33d25cbca9b6e479d1fd385d32e6d669
- MD5 8f1f76c9e899d6439d58a881e9186f26
- SHA1 7e29741dc1cedc60cde7e3f5a94d9c366a309df9
- SHA512 9b9a2bc2fba11b5e531080e855b8e05c7841f0ef4b2d1c4c194f562b5ae9c84b4b244aeb0ab1e5fc4b159ea744d9f4d5ca7bd7cb1e60c82aadfa7d25139ad9b1
- TLSH
  T10C31BCB6E430A63C09C1163FAA2F90E87EAB0657DCF19857FD5E6343142305ED3539A0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral31
- Target
  Install Parallels Desktop/Install Parallels Desktop.app/Contents/Resources/zh-Hant-TW.lproj/License.rtf
- Size 246KB
- SHA256 faf3090c61927a761a993c91f3ada76af4cff0a7a43da343c588d75d4bab7325
- MD5 1d4c305a80896007ebcc8ad42b4afdbc
- SHA1 09e332cc03698d67f03906f3cf46a9497c2ddccb
- SHA512 d780087e518864dcc2adca4eefd44e7a9e4ef679dd4dcbecea15b386e7e4717db53de2044f0a8ac9f7dca449ced64fb40054c492f07ecc02ddcf445f282bd628
- SSDEEP 3072:NZA3Ssg3D8EVvP6jtagbOkpMhdrMqBEvl+CsyoI05oCYp6m7ljmOVFa:z
- TLSH
  T15D34FF660B08CB59E83B244C8CB99BFDC5F54E234330E0A5CDBFF147A915099E5E64AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

File and Directory Discovery

T1083

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Queries the macOS version information.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32