f609e5f2802664c5cfc38fd94a149561589b973b1f4aac4ea9170405f6ba5968

General

Target
default.dmg
Size 961KB
Sample260718-pgqceaew3z
SHA256 f609e5f2802664c5cfc38fd94a149561589b973b1f4aac4ea9170405f6ba5968
MD5 20528d790bebfa4616c2e9f1f927fe8b
SHA1 24a0d70934590565179680fd3cd811f080bd0115
SHA512 3009a5600f4660e17441a3f66b8c2c6eb1d16caf56e36bbe02660d944008a48da316e74021f4f186f8eeaa99188ff3bdce4a981d0f621fd0b6fdd65a83571954
SSDEEP 24576:wn4sL34IarE/d2lT8eM2qolxcQnN4H0BpMsMFWW1MB0sCD:wn4sLjAGI8l2qol9N4HqpM5tU0D
TLSH
T12D25337C370D8DDEDC2B1DB10164299DAD4B2F9B35B154AA7A8B0457B2CA3253B38A07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  default.dmg
- Size 961KB
- SHA256 f609e5f2802664c5cfc38fd94a149561589b973b1f4aac4ea9170405f6ba5968
- MD5 20528d790bebfa4616c2e9f1f927fe8b
- SHA1 24a0d70934590565179680fd3cd811f080bd0115
- SHA512 3009a5600f4660e17441a3f66b8c2c6eb1d16caf56e36bbe02660d944008a48da316e74021f4f186f8eeaa99188ff3bdce4a981d0f621fd0b6fdd65a83571954
- SSDEEP 24576:wn4sL34IarE/d2lT8eM2qolxcQnN4H0BpMsMFWW1MB0sCD:wn4sLjAGI8l2qol9N4HqpM5tU0D
- TLSH
  T12D25337C370D8DDEDC2B1DB10164299DAD4B2F9B35B154AA7A8B0457B2CA3253B38A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1
- Target
  ProntoInstaller/ProntoInstaller.app/Contents/MacOS/ProntoInstaller
- Size 307KB
- SHA256 26865d471f5d9edb156c814ad581da138fb49d24f9a05c05259197d17224f788
- MD5 33f24366ae8b8a60cf03fbd1754c143f
- SHA1 076f9fb5a09aae35b9e38e10eda454655e6a44a8
- SHA512 0ebc7c81be24d1349cd77cfc530f328a3ebfce44244aa2b7af4363664f118bd9aca1d7b80c535fefa980dfff1c8499e71ddde7041b2eb9efa440bfd67be18301
- SSDEEP 6144:Nvnc9iFIbKqut0rlziWvbbxOj+eLznN+bCVkXqirtfubzNR:Nvc9zKqnZi6xO3N/mA
- TLSH
  T18664C9779360D855D0CBC07C6ADB87F1A420F4780A61B2AF6AA49F766FF28D0179D342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  ProntoInstaller/ProntoInstaller.app/Contents/Resources/ProntoApp.app/Contents/MacOS/ProntoApp
- Size 444KB
- SHA256 ca20feeddf2bb9edb2ba29d393387a55037260151b236041fabdc9f08b12ca8e
- MD5 e0fd4aa6ba07003f9bdcee0b44358f3b
- SHA1 0d51267ffd442fdfe9c78f88d13c429b43702c8d
- SHA512 7b32b490a64e3cdcc4470af8a5cf0156200adddbdc6d55c845939703767d33fec2afe8eeeedec13d0655888bd12de9e7725004ac630e96bacbe25c561d094128
- SSDEEP 6144:u9mMHFGRWIcUe8LAzv1mLfMy8+3ctQO0scbiW1Fsn4qau3zV0Yt/M7ai6/0tqHqq:u9mMHwkIRe8LAzv16T8+MKKc3i/R9rCy
- TLSH
  T187A4EA339760D859E08BC4745AEB4BF0A810BCBD4561B5AF7A90CF663FE1CA0079D396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral3
- Target
  ProntoInstaller/ProntoInstaller.app/Contents/Resources/ProntoApp.app/Contents/Resources/PRTPLG1.bundle/Contents/Resources/unrar
- Size 429KB
- SHA256 c64cac9318db65d129772f2f422046d06d6d61fc4c6f3a6326e9a8bea32e8aa7
- MD5 f81f991af0573feb57ce426f934178ca
- SHA1 d2225575cda170aa3bea9ceec44cf7f74329e37d
- SHA512 1a49a7a16891d2b4a5c060a785733743f56b84bbda3c137ed69bb03237bd842077867d40bd99fd1b92a87fead580c76f102c75b3be94c212540a4408a915cdb8
- SSDEEP 6144:HtSkE65w2iLuabZ1jeBZjyc6XkWhSLbOExpL22Nz3D81u6aTV90c6G/ZkM+:H1Ef2iTbZZeBJyRhubOmpLzD0NsHCGb+
- TLSH
  T186946D02EF1B45B7D85A0AF0521FF3EEB76D75F1A0708B42F7485E0BAB73291194A681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral4