7f70be61269e12eca3a3c43ce3a7a53c83076ce70fcaccab0635ccd0ee5f4fb3

Sharing

Copy URL Twitter E-mail

General

Target
DADALIFE.bundle.2024.2.CE.dmg
Size 99.7MB
Sample260716-yevc1sct3n
SHA256 7f70be61269e12eca3a3c43ce3a7a53c83076ce70fcaccab0635ccd0ee5f4fb3
MD5 254a4bfe58b48cee033d563c03be0bf6
SHA1 abc4edb50702e62d5480deb57b807dbfaa2e9ab4
SHA512 f60b2732cc4cc7791a3cb24a8203f2f3515e18b10c40140ec3b96cb85b00c1e134a54ad9bc688fe4c4023fac8ce773a1f4091b9d9d50bcdd02df8ef944a5ea0a
SSDEEP 1572864:Ar9Oj9ubXu1mC5K0UgDpix+/wDzoUUA4zkjgjxgBl0EtVDP5r6A1wbWxkc9bgyeN:V1X5KDcpix+KCrEzr5GdWN+izi
TLSH
T1113833BB08E90316D3B9C17A259EC500AFA764374C6A013672CF91E579D8BD053EEA4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  DADALIFE.bundle.2024.2.CE.dmg
- Size 99.7MB
- SHA256 7f70be61269e12eca3a3c43ce3a7a53c83076ce70fcaccab0635ccd0ee5f4fb3
- MD5 254a4bfe58b48cee033d563c03be0bf6
- SHA1 abc4edb50702e62d5480deb57b807dbfaa2e9ab4
- SHA512 f60b2732cc4cc7791a3cb24a8203f2f3515e18b10c40140ec3b96cb85b00c1e134a54ad9bc688fe4c4023fac8ce773a1f4091b9d9d50bcdd02df8ef944a5ea0a
- SSDEEP 1572864:Ar9Oj9ubXu1mC5K0UgDpix+/wDzoUUA4zkjgjxgBl0EtVDP5r6A1wbWxkc9bgyeN:V1X5KDcpix+KCrEzr5GdWN+izi
- TLSH
  T1113833BB08E90316D3B9C17A259EC500AFA764374C6A013672CF91E579D8BD053EEA4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion persistence
- Installer Packages
  Adversaries may establish persistence and elevate privileges by using an installer to trigger the execution of malicious content. Installer packages are OS specific and contain the resources an operating system needs to install applications on a system.
  persistence
behavioral1
- Target
  DADA LIFE bundle 2024.2 CE/.DS_Store
- Size 8KB
- SHA256 b295a85a4937fc1dc9f09f7a634ded0007f0f19beef2709319900bd2be8c649d
- MD5 bbcc7736206a067ae69f12a333dda1fe
- SHA1 7654aa4cc27b1b26e8427e33e6f8a9a9b2e3cad2
- SHA512 55e5117652db18a9670e9d4e9236752bf1fec71ba5c0fdeb25ffbba305d4ab00642e336965c60f9d9958adc91e45bcb045c393aa9d08f6ec50ff14ce19975bb4
- SSDEEP 24:D8MVrSihfWlAcm4lCCVKqPlSq4ZyqcJsh0+/yDlvqs2ylFCxX+Lts:DJ5WAL8CCVpdL44Jd5ysZlFCxX+Lts
- TLSH
  T1B902001D83F49328F06A86B20FA907210764FAB550788B0F98FD16062C12FC06E73F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2 behavioral3
- Target
  DADA LIFE bundle 2024.2 CE/.background/backgroundImage.tiff
- Size 90KB
- SHA256 0b9b5692cd2387ff8aa45d7f5fca79102027d39b7992a1131c0f46513bdb9d96
- MD5 5e8369384f54eafc6c42b7ff3e68165d
- SHA1 8b64c1c817e7f1b9eae5970aa3255b0b910e733d
- SHA512 35fcc9568406e6537adf04c63048127a9af9d2ccf4396f09d1d90d8fc2e88f6e458759e5a0385bab6d2128b2875b8b2e3c277d25997b7ed7c68faaf85f025e16
- SSDEEP 1536:vdddlZIYP57EsjDlvwvflcWmlbfChhddddddddddddddddddddddddddddu44ZlN:jDP57EsjJovfyljChcT+1R4fJDyp1q
- TLSH
  T1F493BE8B7FEFB874F0456EF5C6E4C550C5495420988B1B9A27A6237DA9802EBEFD3304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  DADA LIFE bundle 2024.2 CE/DADA LIFE bundle 2024.2 CE.pkg
- Size 99.6MB
- SHA256 9de6fcda2e1983da6b88bd640aba161f169c26a6f2ced78619126724022027c7
- MD5 2c85a47432dcf442a6df912fbe17266b
- SHA1 1328c916aa51403a7264933717fb8a80fefa9b33
- SHA512 ccd6059af29473832e3c4cad18e80a16ab900d5415bb7069203ca9732846fb8fd19b16c5edf407d0337061721fc6ed7ef9d3099488ef9c396fa753f20b3aa153
- SSDEEP 1572864:2RoIaj9ubXu1mC5K0UgDpix+/wDzoUUA4zkjgjxgBl0EtVDP5r6A1wbWxkc9bgy9:Vd1X5KDcpix+KCrEzr5GdWN+izik
- TLSH
  T1D33833DB08E9031713B9C16A35EEC500A7A774345C6A413672CF91E67AD8BE053EEA4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion persistence
- Installer Packages
  Adversaries may establish persistence and elevate privileges by using an installer to trigger the execution of malicious content. Installer packages are OS specific and contain the resources an operating system needs to install applications on a system.
  persistence
behavioral6
- Target
  DADA LIFE bundle 2024.2 CE/VR.nfo
- Size 261B
- SHA256 357f61db56dd6e373ab84078632b5f0730812fa82df30c47fdfd0d2720c5679e
- MD5 4f5b9eb9cd7768dfc920b2d78b361e8a
- SHA1 5890a9164f0e138346780d9fa216cd2ddbcac714
- SHA512 485017b098d9bad96f17a473a1fd7319d21a85eccde8d426a99a8dd23b18bfd000db41580b603d7175d37731eb589d7936a849417771c63828a258f05f9b680c
- TLSH
  T18AD0957D2E17488E5582417175785054ED44114F94253040FB5C870271FB0C0443615D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  DADA LIFE bundle 2024.2 CE/VR.nfo:com.apple.lastuseddate#PS
- Size 16B
- SHA256 590f36399b5a7120eaa4487d77c4a88f86aa6916d915f7969ea6a389a9e6e237
- MD5 5659a8b6d6d6f651342ff1624da6be00
- SHA1 48ea03bd9a429480b966a7e756a628a2d2492df5
- SHA512 67aa0a975c363160ccda860732b5f608f84799ee1de5e6f00711dafd6800d43c9cd28872010b619b2c8de60a123b8e7d307177c0393a6e00d292daaafcc41a75
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Installer Packages

Installer Packages

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10