0af70240f14cd04cd2cd60a227ac270d03f8b61ca59035ee7616ed3169fc38e2

General

Target
PA_Patcher_MORiA.dmg
Size 51.8MB
Sample260721-ynyf2aeg95
SHA256 0af70240f14cd04cd2cd60a227ac270d03f8b61ca59035ee7616ed3169fc38e2
MD5 42378bd3d4c9a1d2ef11d5228bdfb78a
SHA1 2aadf7d0cc53923dd33798d6ff53391c8fad0025
SHA512 bb41a21c3de3b81b5d25964acecb67a10fde92b915d6ccfcc3e4bbcf72f9b073c798f115d36332f67b531617e0956518d18dcb0d8f55ee51aeeafdbdc0d0c31b
SSDEEP 1572864:ukKQSmK4snXOvsWsyyE7/23rPPHWtQ1M7sY7sP:urQ04NsWsIr2jfWgCsCs
TLSH
T1A3C733B809547754F8EB43BD82E14F88AE7C5E673919CF2D4A178B28D7B58E58B13C08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PA_Patcher_MORiA.dmg
- Size 51.8MB
- SHA256 0af70240f14cd04cd2cd60a227ac270d03f8b61ca59035ee7616ed3169fc38e2
- MD5 42378bd3d4c9a1d2ef11d5228bdfb78a
- SHA1 2aadf7d0cc53923dd33798d6ff53391c8fad0025
- SHA512 bb41a21c3de3b81b5d25964acecb67a10fde92b915d6ccfcc3e4bbcf72f9b073c798f115d36332f67b531617e0956518d18dcb0d8f55ee51aeeafdbdc0d0c31b
- SSDEEP 1572864:ukKQSmK4snXOvsWsyyE7/23rPPHWtQ1M7sY7sP:urQ04NsWsIr2jfWgCsCs
- TLSH
  T1A3C733B809547754F8EB43BD82E14F88AE7C5E673919CF2D4A178B28D7B58E58B13C08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion persistence privilege_escalation
- Executes a macOS installer package script
  Adversaries use OS-specific installer packages and their resources to trigger the execution of malicious content, establishing persistence and elevating system privileges.
  persistence privilege_escalation
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  defense_evasion
behavioral1
- Target
  PA Patcher MORiA/PA Patcher MORiA.pkg
- Size 50.7MB
- SHA256 dde35e13c63549c39bb9eb5c9968b6bab14eb542cd65cff22a187e681011523c
- MD5 c491b4ccfd69e6486e3a38796f44a151
- SHA1 cf978dd138944db3c35ee2be59f00ac9a8dc947d
- SHA512 4207bee70c094d456f7527e8a1a50584eb793954d9f43860f1ff792c89a8ff573a382bb7fd08b5feb1e8c65bde7ddb3f5cccb524b2de9a6d742a86480452109e
- SSDEEP 1572864:nkKQSmK4cnXOvsWsyyE7/23rPPHWtQ1z7sqslS7:nrQ04dsWsIr2jfWg3sqss
- TLSH
  T19DC733E81854775478EF438D82E14FC8A67C5E6A391ADF2D4A17CB24D7B98DA8B03C1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion persistence privilege_escalation
- Executes a macOS installer package script
  Adversaries use OS-specific installer packages and their resources to trigger the execution of malicious content, establishing persistence and elevating system privileges.
  persistence privilege_escalation
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  defense_evasion
behavioral2