9623fdbca77a1aba47c7700dae7aa66e17deccd054d2cfbd34b811b17dce7d99

Sharing

Copy URL Twitter E-mail

General

Target
BetterStage 1.3.4 [MacKed].dmg
Size 18.1MB
Sample260722-e437nsdj9w
SHA256 9623fdbca77a1aba47c7700dae7aa66e17deccd054d2cfbd34b811b17dce7d99
MD5 683fdaa1dd00c64c8ca9ff3a82ee9602
SHA1 bf182a2678e29af86ac6fd2a874d54b0658c21b3
SHA512 83d0b835a410a7e526e41dac17d9aee0054428d793df61c3c9e8bf5bec099d842f9155aa3f6f4c3c382eac67afd29ddaaf7440738e8a7ebbbf39f65f644215f8
SSDEEP 393216:w6KarFMFkm0+e+SID1kHpagRe5kwLV0TVTb+WbidREF8S/Mj9:w6VFvt+ZPkog455LV0TVTb+R/EFn/MZ
TLSH
T1AC173339464C61D8CE254675D539069C4F3EADD378314F23BCBBA34982AD983E8B25E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

defense_evasion macos

Malware Config

Targets

- Target
  BetterStage 1.3.4 [MacKed].dmg
- Size 18.1MB
- SHA256 9623fdbca77a1aba47c7700dae7aa66e17deccd054d2cfbd34b811b17dce7d99
- MD5 683fdaa1dd00c64c8ca9ff3a82ee9602
- SHA1 bf182a2678e29af86ac6fd2a874d54b0658c21b3
- SHA512 83d0b835a410a7e526e41dac17d9aee0054428d793df61c3c9e8bf5bec099d842f9155aa3f6f4c3c382eac67afd29ddaaf7440738e8a7ebbbf39f65f644215f8
- SSDEEP 393216:w6KarFMFkm0+e+SID1kHpagRe5kwLV0TVTb+WbidREF8S/Mj9:w6VFvt+ZPkog455LV0TVTb+R/EFn/MZ
- TLSH
  T1AC173339464C61D8CE254675D539069C4F3EADD378314F23BCBBA34982AD983E8B25E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Frameworks/macked.app.dylib
- Size 5.9MB
- SHA256 1b35647ac76b9edc99689be6e8ddae776c94820f29d0b559461774b6ca8a96e3
- MD5 2cc63bc399afc5447693e7d27ed54b41
- SHA1 6fc2f5ae34f2a5e247d0b51c733b6c11f890d50e
- SHA512 6e66f47ba747344e712a43a72c958b590706240adb84b4613feacd734c84a1c48fd1645f1e6ec420686f8fb5fad2db142520a9edf1fc34c6ca9db99aa40d502e
- SSDEEP 98304:T2DkWr8yifxR6CwKKGecWssvhSIctgZWb455OE/VxVVHBpGz:qoI8yifxR6LKpNspatwVK
- TLSH
  T18956AE1A2F69F495C1E400B22BE94E9321377DB04F3A255EE1913F2FA8B158663C53B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/MacOS/BetterStage
- Size 40.6MB
- SHA256 4dcfab3ac3fcd8036981dcd2269b1eec750a75fd2b1dab3911fb56d5402eac6f
- MD5 fe6893b43074b9568cf2bae2bf64ed7b
- SHA1 645b192e34c6d442c98dd8baaa8b367f6627db4d
- SHA512 9e22c640acca27d0ebcda54691580f07c8441060f4f0908c9f1473c738fea69ef90e8e95c464ada733574a8c4e14a72410e0331e66d5f739e4b674ad556b91ac
- SSDEEP 196608:L9jD95jfpinHJsOeDZBNILtdCbvLgOVglb7KYW25V378OREZgHuaV1PQey8ocZ:teN0SbuecaVKY
- TLSH
  T10D977E32A6843974C227F77EBF5F271CB451F530C92206A69A6910174EF56600B3AFAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/CustomSymbols/custom.inset.filled.centerthird.rectangle.svg
- Size 817B
- SHA256 b14bd1f14a419039c9f41ea941165588e7d77ba23087b6759c5f43784e50d570
- MD5 be839cfe0b78da7ec3302978f9f90bf5
- SHA1 641dbd99dbde74fc52c8b35fdc9475b12d084882
- SHA512 43ea00772a966493d70f10977a5451ab267c96f857e396bccd608b9e5fdd8e4b981aa6d2265368ee831f87db38f188009affd46fa30383f1fac911f2a76e90e1
- TLSH
  T1C2018E4C2D216FF45FA9D72CE11990D6BA3184FDBDA12570C0D05F427D88849476A6F5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral4
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/CustomSymbols/custom.inset.filled.centertwothird.rectangle.svg
- Size 819B
- SHA256 bc3664e30347b1856eb8cebe0ef9c6661e4d0a03234303a98309742faca397a5
- MD5 c92a289dae5567b5f18fc0279236432d
- SHA1 c0d8bc1d261ff49984b6f92b93f4043f856dff6b
- SHA512 3e053af0bbc65bdeab45fc6f9d776e3b025c3629f33fb25248110ffe1dc17a5e48bbbffecfc726a1545800c598a8969f068c82a0a2899659f172985393130f41
- TLSH
  T18B016B8C2D576FF889A8D73CE00990CA361140FCA99125B8C0D01B43799484E43369F7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral5
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/CustomSymbols/custom.inset.filled.lefttwothird.rectangle.svg
- Size 819B
- SHA256 02d01764e61573d5001b26b1033bffd7183225d4161cf9ddcd5fcfdf485bb43b
- MD5 469ea32895cbb751e309e6d181cafd8f
- SHA1 2c2faf9726ba5523d94f5fd8e07fc3ec258f27d5
- SHA512 174bb34a3d0475d9a0234ff7a3c4fa3271513b010ef9a3965a8fec92001003479ae13c6870bfee57ddb3f937b9e361b5147a3bff55b8ee569da35c4b57a2a1a0
- TLSH
  T1B901B14C2D52AFF49AA8D72CE109A0CA772154FAFD913538C0D11F427E88C4E47666F6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral6
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/CustomSymbols/custom.inset.filled.righttwothird.rectangle.svg
- Size 813B
- SHA256 7609201010f62f14b759399c633c8dfa6d85060011548b67bf835bc8cf00f99f
- MD5 6060a76d745fd6e8444ad8d3f613ca13
- SHA1 dcdceeebd046fa4ec7e1f35b739890f40d62189b
- SHA512 8e9fd377f46435e4e3a3923ce07cc858ebd55fc07023625b4952a89a41f9ee1f05944ab99b4c9c880214d74950e0a0f181ecb4e04e4d02acb801f86ecbb49117
- TLSH
  T17201AB8C0E151BF80EE8C72C9219D0D57B6324F9EA801678C0A12F4A7DA4D854BA25E6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral7
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/betterstage-app-icon.icon/Assets/Group.svg
- Size 1KB
- SHA256 d7e91915846eeb1620337203acab558747b5f59d91dfe721e0d81393df814f18
- MD5 1cfac3f74319326367e18d388c41ca31
- SHA1 53c2dd46bd81b7a99fda7a5fa8b53c1c0eb4b98f
- SHA512 232f4d769022c2a8fb9f3f2f3d420f915a83f727864b342b6f483ee029175dc0bf53603a9d1719e5d8450c1997234b423e796f1c271e984338e89047cec0e6ec
- TLSH
  T13C21ED9AA2A9DC3BE19CC1DDCF00D4396468A25774C2C258D3D4FF0F15994AB2E1E7D0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral8
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/BetterStage_BetterStage.bundle/Contents/Resources/menu-icon.pdf
- Size 4KB
- SHA256 ae0768306f9db234cd9f2afa7d8bc295660ee814a23033339afc14a3988cbdce
- MD5 8c27082746f4548ebf455a1a3d9d541e
- SHA1 bd38ca172fbdd72c5d9632c70915f5e86b620f50
- SHA512 f5a5f1ba387f156293e1350ac8e21ff4b60df9ed52819dd6b8b1eefa770e6edbd86f75e610a4afa8938d761e119c53c97350ece3bdadbe9b1cd64ffeef12a287
- SSDEEP 96:GztGN3Jnts9+weXxrmawgjI2Ls6wLCdyW4E8qr:rZn4+pm92Ls6wLCdyWLf
- TLSH
  T1699119F4838449D8F8018F48CBAD3D4F551E707FBEFA16C870DD6B189B21A55AA5A090
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral9
- Target
  BetterStage 1.3.4 [MacKed]/BetterStage.app/Contents/Resources/menu-icon.pdf
- Size 4KB
- SHA256 ae0768306f9db234cd9f2afa7d8bc295660ee814a23033339afc14a3988cbdce
- MD5 8c27082746f4548ebf455a1a3d9d541e
- SHA1 bd38ca172fbdd72c5d9632c70915f5e86b620f50
- SHA512 f5a5f1ba387f156293e1350ac8e21ff4b60df9ed52819dd6b8b1eefa770e6edbd86f75e610a4afa8938d761e119c53c97350ece3bdadbe9b1cd64ffeef12a287
- SSDEEP 96:GztGN3Jnts9+weXxrmawgjI2Ls6wLCdyW4E8qr:rZn4+pm92Ls6wLCdyWLf
- TLSH
  T1699119F4838449D8F8018F48CBAD3D4F551E707FBEFA16C870DD6B189B21A55AA5A090
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10