a2a85cfdf19bed873b59b79efc4f2b1d136866815a2ea5b55c0f441ef26c1156

Sharing

Copy URL Twitter E-mail

General

Target
QLab 5.6 [TNT].dmg
Size 36.8MB
Sample260723-kf3twsag35
SHA256 a2a85cfdf19bed873b59b79efc4f2b1d136866815a2ea5b55c0f441ef26c1156
MD5 9424d0aef5a9c0669a11c7b177f14219
SHA1 efba262ba3a71b9af22cd04fc75e13f9749227ae
SHA512 bfd36b508229ccd88de07243de7f8491bf6b9ce7e26a6a6d60b74f831368802a96f1c14244311f1f0c8813f09a14e1478766b24fdb3f141f59d5d0c6983b8e2d
SSDEEP 786432:0F7yeS1QwdVX7oJqgMA5Ab2nHUu13dofueq5UEYt6aYStN:0F7yeYdB7tg5We/ofuRdYt6aYStN
TLSH
T1A687337982DD727BC98C7AB8D42A038D6D86BD878420A72A558272D8F7FB551CC37433
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  QLab 5.6 [TNT].dmg
- Size 36.8MB
- SHA256 a2a85cfdf19bed873b59b79efc4f2b1d136866815a2ea5b55c0f441ef26c1156
- MD5 9424d0aef5a9c0669a11c7b177f14219
- SHA1 efba262ba3a71b9af22cd04fc75e13f9749227ae
- SHA512 bfd36b508229ccd88de07243de7f8491bf6b9ce7e26a6a6d60b74f831368802a96f1c14244311f1f0c8813f09a14e1478766b24fdb3f141f59d5d0c6983b8e2d
- SSDEEP 786432:0F7yeS1QwdVX7oJqgMA5Ab2nHUu13dofueq5UEYt6aYStN:0F7yeYdB7tg5We/ofuRdYt6aYStN
- TLSH
  T1A687337982DD727BC98C7AB8D42A038D6D86BD878420A72A558272D8F7FB551CC37433
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  defense_evasion
behavioral1
- Target
  QLab 5.6/.DS_Store
- Size 10KB
- SHA256 3d1ecfd507c9f14273670c0e5bee373056ed6941f7f89d340bc86a2e306328c0
- MD5 19ae3b48a534ad641612d7eae53682e6
- SHA1 1011c8a8ca6fa239cb840e54ce0031b9f3dce7cc
- SHA512 0ee1538bf31950e5cabf2aac2f7db769bcb89b276101782d1359860d82289756e09201b611368beca8e486d74518d98d055e057f4517d59857c8e4b176ed4615
- SSDEEP 96:2gKiqZ+3K8CCR9HU1sik38BmHLRk9J+QjXWYa8BmHLRk:lF73K/C9JRqo4XER
- TLSH
  T1CD22E506BB86886FF8371F3199A307212726D064E7798B1B576E35BC5D133954F21BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  QLab 5.6/.VolumeIcon.icns
- Size 376KB
- SHA256 f0167881a1b0af33217816ca50d48345b2767bf60c9ca38826e2d8fecf9cce94
- MD5 61f79527e373ea03ca7728d05abcbd40
- SHA1 54497b3361d9cc88fdf5a84fa4319cdd89bf7cf4
- SHA512 68945ecd528a4f02949a244d5777c0eef92aca646a603a4ff509f755fb099c9ea151db78532f697d140315a62ab2e79b921b286115e2249a7bfe40cb8fd235c7
- SSDEEP 6144:lFXa4RoBgHi5NMjukHi1nMhae0QnPHRkeTcDjT+rF9bPDppHFsrf1AnNyP:lQBdMqkHi1nMMnLD0tPDPHyrf1IN
- TLSH
  T171841302739702A8D1CEAF7624761B40CB606EB9DF02123D58CAF439E77675C8C69BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  QLab 5.6/.VolumeIcon.icns:com.apple.lastuseddate#PS
- Size 16B
- SHA256 f3f12c5e43f532a6660bfb707f2066ae993538025a6a4bc52a90e58a27a8134e
- MD5 19224b829285e4dea082fb89560695d2
- SHA1 a1660f0ea715319e9dd8c38689bbdca4fecfa57a
- SHA512 4c1fbb792f5d0c37cb18033f537df2ccdf0901cb6a840e371089897fd161a64eac061dd03cc270f5bb0002d16c177be67910bb18c91808c1259debe4212d935f
- MD5 SHA1 SHA512
Score

1^/10
behavioral4
- Target
  QLab 5.6/.VolumeIcon.icns:com.apple.macl
- Size 72B
- SHA256 bf87935551fe79b8d6161ff5f7132ff1899883f75b0fce5d64ffe9b4715a2c67
- MD5 06255dbc70d5aec1bc9d06fe14789a9d
- SHA1 985052dc8b9fd8c95535b1579402c20b23e1ca53
- SHA512 1107481fe3ffc792540fb854b9dad9aee56b86a242ede045e0d0e87ef51ee0c92201570fba90b753ce2776372977e5d7c3f552527d67446f33f59137debb3f96
- MD5 SHA1 SHA512
Score

1^/10
behavioral5
- Target
  QLab 5.6/.VolumeIcon.icns:com.apple.quarantine
- Size 22B
- SHA256 53a355bf83c012a82a6f727b1eefa96919791e3a4fb9b64f1cbeaa0bc4505f8c
- MD5 a200809dcff602f0873c924e4922e805
- SHA1 688116e29625cbbd2f60628ea97cb8ef3d5bd0b6
- SHA512 e4b652e52188568ecfbd294ce1b90b532129b3bd596cb15dc4d3f88738fc2aa454c99d1e43bc7c2bb9dba99899fb5b1bfb112a18a78a398d6d0c4cf1e0968bbf
- MD5 SHA1 SHA512
Score

1^/10
behavioral6
- Target
  QLab 5.6/.background/bg.png
- Size 86KB
- SHA256 9767cbc6f03421fb8abb858eae12fd63790f99e2344d907ef0986ea8330b439c
- MD5 ccccdbebe8a63d52a5634c575562a7ef
- SHA1 f22b7e39aa29a01e5784d08aae8557127f0bee75
- SHA512 df62a14b093774928a50d69008fc5cd9d52088660d77abd6a457fe24d0413db62e6cd7245d4edabc035d41a0dcaced0cc38a2512bc2e2820b353451de72229e1
- SSDEEP 1536:naqDHpS/84VwZCQDfNucLv3Kk8OP3B++9d78yrtCsZ5an0QhIiRs:nO84uCQpr8KNddVHoa
- TLSH
  T13A931267E764773FF8E26777DABC46FC5C5B2616BB70E49014A0A3902A88813B50E0DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  QLab 5.6/.background/bg.png:com.apple.lastuseddate#PS
- Size 16B
- SHA256 fe3875b849855a5b29f469c6e9c73120942e369c6d91c4708e2efb39351fba49
- MD5 d8958234ceceefa7384b401e23f240aa
- SHA1 1e0326a42380ad1b8e493c360b38f947f376dc73
- SHA512 fab0e92069ed34b964c4b10609c78302a9b94b6d6a598050cf4441a21ffb0653883307088b6225fe6a2106a8b2e451c8762754942cfd6067ca516939f2bec13a
- MD5 SHA1 SHA512
Score

1^/10
behavioral8
- Target
  QLab 5.6/.background/bg.png:com.apple.macl
- Size 72B
- SHA256 b51d79f2cfffaf62a5cd2bc33ffecbb8c007d03b8e705222d283525e88eb77b5
- MD5 aff632836c1164c3992766c106b57f8d
- SHA1 304c76f5622207b015bd917088978bb010db73a5
- SHA512 d6e0c235a5a1fd4c7304dfc7fd0b3ce138b00a6731f9e71bfd046034ca32708a2a3e0621d0dd4c3c23702841abebc7403275deea01409a68a5265edf803bd93e
- TLSH
  T103A0044C34555577C335447C03C0544143C451C410C0C10F3D14D17011044D01D40100
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  QLab 5.6/.background/bg.png:com.apple.metadata__kMDItemUserTags
- Size 42B
- SHA256 aad02e1bbbb00b10402fb9abc3fb93c5eee7df168946b1f75bbdb510b6763a1f
- MD5 3d641df340a8a0121793c0a077da61b1
- SHA1 44668804d8d14412ba09d3625109dfacb70e5476
- SHA512 e67f6a03bd110b718bccd0519b71db6c9473e4cf4eca2254cd81ef703a768ef81300e173010ab184657efa3f67284d139f23afcd6e0071332240f6195a0fcf77
- MD5 SHA1 SHA512
Score

1^/10
behavioral10
- Target
  QLab 5.6/.background/bg.png:com.apple.quarantine
- Size 22B
- SHA256 028bbbaa4e930a80e219115e7d36233868f128d3fed2c5c8c3b8ffbbb408fbd2
- MD5 5ddf174686650e468949ffbd37da2375
- SHA1 f066f2210fa52581c6b3977096d0add2eac87614
- SHA512 71663216854a30de892a4f9150cbef9890c1e773b66dcdb91d5f0f69a3be2762d89d6da67bc84cd03c4e348dbad79da332330e008d532276bfd19634df87b854
- MD5 SHA1 SHA512
Score

1^/10
behavioral11
- Target
  QLab 5.6/Help.txt
- Size 1KB
- SHA256 785735620545afa1a8354b159c2cce0aad84534b2600b47015bd11918e4cfc7a
- MD5 e64906f0344c9c0776fc8331f2b6fffe
- SHA1 0553b68197e057b1ae4aabb0c499089e2edd4f48
- SHA512 82ef3a4cde7ff7e205a569ca5175805342fac1073e1a9fc8f45f12cbefe709f199ecf7a8560e9956d1499c825e2c4787c70679d5fe164d4d6b42c4f7d88a4c20
- TLSH
  T1E931C0589DA605DD0602756FEC09DE4C7EFA80BF3BF6632600E8A81F3693524C23685A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  QLab 5.6/Help.txt:com.apple.metadata_kMDLabel_dnftphl3a2xxyn2rmlkjb7ynxa
- Size 89B
- SHA256 2a341555048df0a37df3227d9f3190c57751114f605e8c0456f0aa4672bdb829
- MD5 91d7387467af8025b34179eaec85926d
- SHA1 c6cf933558aa7c77a79959cd7461d3d5c3d8ced6
- SHA512 4554e1ff477d0ff2b243b38e07476b87a31656a96d621245504e4b6e8a22d7935a5858e0f7f85ce65f9a9724b6fd2b1a21a9b42798e217f105db1db05355fd6e
- TLSH
  T10CB01231144B8CE841010429500C05B075498427F21BD191C49E73CA104006054000AD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13
- Target
  QLab 5.6/Help.txt:rsrc
- Size 269KB
- SHA256 4de8692d088a30eecea856d70870dd475c30a462607c8f80bb9b41d6ffc70834
- MD5 2dfe4fc75468c97dfa2516288e6959c2
- SHA1 45b290ff6034d2fd299d5510f9c17bf962613bf1
- SHA512 794d897a2a05468c5244553a971bd0269bb08db58ffd2da3ee3ea99c52998677080b9f5991ac4535c10e892350eeed41c5f79c83d5f5f1982bfdffc873f2d85b
- SSDEEP 6144:dpN5TSLG3NVtQW6kkkaJRiI34CidYmnoqyDY:HHTh3azNJz34sZqyDY
- TLSH
  T11E441258060ED491E308B67F0A3901A06B26EF01AFB58F6F3698F131F4BEE574D4691E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  QLab 5.6/Manual install/QLab 5.6 [TNT].dmg
- Size 34.0MB
- SHA256 9420248f5ffce892f1155e133e8c9494ac4b3d7c8d9c5f174c104d98dc0c13da
- MD5 41bc43dd1b2adbc80008f721fb6b18f0
- SHA1 39e29c2f1e8caeb9eef9de1337a170affbe23fb6
- SHA512 5b36e26f120dbd49928a39dc82ddd8db9558942a97682194b4ad8d2208e1db0d956ea30cd9d418c4efe730cc43877592948ad0c398dbc0cbaf387000027bfd24
- SSDEEP 786432:37yeS1QwdVX7oJqgMA5Ab2nHUu13dofueq5UEYt6aYSt:37yeYdB7tg5We/ofuRdYt6aYSt
- TLSH
  T19C77337AC1DD72BBC98C79B8D42A038D6D86BD878020A72A594272D8F7DB591DC37433
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  QLab 5.6/.DS_Store
- Size 10KB
- SHA256 9929441360e8829fd9547e67a15bd2729bac5e6611be643c58521ea2b3566c57
- MD5 13484da5379cf8c62173b02c8d276891
- SHA1 79e0cad7a88cc5774cf496d08da484bc74cd2649
- SHA512 5686e650d98cf1c82cc16af464cb9d45339cbdc5a88e4c48b581774ca9468f6e3d2611478598964d075b7b26e13e85b62c4c86a43887dc904de3cbf1891ddcaf
- SSDEEP 96:2gBqZ+3KwUCCR9Hb1sikjW2NmHLRT9J+QjXWdWW2NmHLRT:lB73KQCu89Rpo4Xqb9R
- TLSH
  T1D022D106FB86886FF4371B7199A347202726D0B8E7698B1B563E35BC5D123954F21BF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  QLab 5.6/.VolumeIcon.icns
- Size 376KB
- SHA256 f0167881a1b0af33217816ca50d48345b2767bf60c9ca38826e2d8fecf9cce94
- MD5 61f79527e373ea03ca7728d05abcbd40
- SHA1 54497b3361d9cc88fdf5a84fa4319cdd89bf7cf4
- SHA512 68945ecd528a4f02949a244d5777c0eef92aca646a603a4ff509f755fb099c9ea151db78532f697d140315a62ab2e79b921b286115e2249a7bfe40cb8fd235c7
- SSDEEP 6144:lFXa4RoBgHi5NMjukHi1nMhae0QnPHRkeTcDjT+rF9bPDppHFsrf1AnNyP:lQBdMqkHi1nMMnLD0tPDPHyrf1IN
- TLSH
  T171841302739702A8D1CEAF7624761B40CB606EB9DF02123D58CAF439E77675C8C69BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  QLab 5.6/Extra/rhash
- Size 203KB
- SHA256 88f68531f38551bfbac210161bf16c1c2008092eb09eb2f89c17b7585029791b
- MD5 1c3d700b96b697f6b706dee7a20f691e
- SHA1 a9407162477c4836ee6f9b111832075a1d530873
- SHA512 9bb9b239c0d919cd1f9618c67363bf0b968cb1efbdfd905e803797af02ab5d1daff28d93f6fdd4904431bf4e9fd1dccd51fabb5156edee65dfa7657e767e45ff
- SSDEEP 3072:n7XEH9Y35a4WAAofe9hGDQ8BoB5Y9kq+QnhDHaWV8RMaNikJfY7oC:n70HYWse9Hx5Y5hDaxwkJfY7oC
- TLSH
  T17C147F81EAC357B3D4875570806EB33FBA21D2125230DA3BC790CF32BD767129957AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  QLab 5.6/Extra/tnt.nfo
- Size 3KB
- SHA256 beaea64f05a7c002a0eed44ddfcb41d0986e18f615cfa6f88ce8a3e900d06ed8
- MD5 4c8dda9c930e69676d6cc5b5bb1b34f1
- SHA1 e10270040699a9d7f5396da5044f88595ca94d52
- SHA512 864b57ac7641be864eee680b6a48e1eb381bf42b4fa32843e52bcfd9b6ccb33d5f9ba3eb7739b2c4bf55c7afe18121683c383ff221c33ae8c11d8c37e2805125
- TLSH
  T1C07193E2284014640D72B0F32813FB6FAFB2115FD0D810FABE4D994757460EC47AA6E9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19
- Target
  QLab 5.6/QLab.app/Contents/CodeResources
- Size 1KB
- SHA256 660b1465901ca15f2fad3c3ddbf86773de28388c146aa22b716dd2cf095fde60
- MD5 0fbfff3b776c8407b7b899760f24383a
- SHA1 a932e4a00c20d617207bf02eb341ad16d8ad9b17
- SHA512 448eb70137fa40078c2023f4c61771f8f636dc2553eb3e0f22e1f79b0cef52a73f9c536643bbc099af758e89d7cc51022339164b23ff76570395868dd5b7819f
- TLSH
  T1D04185AE57882081DFE1A8E493C8946BDC7603DF97A7B0921149C8C721C5BA91B5553E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  QLab 5.6/QLab.app/Contents/Frameworks/libndi.dylib
- Size 27.0MB
- SHA256 df98775e6c2acf7758905b67175993f9be890bd670e1cf129885c210214786d0
- MD5 c93d0c5b2e7a86fb6d0d3c823f816c25
- SHA1 09eec0ca31770f99650a83c8ef21f5fc11dcd309
- SHA512 4a1110fedff5b3b869429dbe0517f21761994a2e41c00d5edea13ce6b0213173713f9f0a28861f0ca1b1d6c6dc8ec8900a75183d9a2d9f6670e8d80ab531a638
- SSDEEP 196608:/6yqRMFOTC1uviHDeLfDWfY25xXjdhbHBay351M:/6yT5xXjzbhFPM
- TLSH
  T17757F68FF5D69B14E152083A3AF37B12BD58327D680925F31B2B5FB13A243D0AE65C94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  QLab 5.6/QLab.app/Contents/Info.plist
- Size 19KB
- SHA256 d1395ad3b2190eaa232b3663d9c2a47f41aab923f6f9e7573164d306c9a7e6b8
- MD5 97dde89998617c3939b2f0ac5e4cb21e
- SHA1 0254ba86602b3e17aa2b94f1cc9686a1ea2fe685
- SHA512 ede8efca4a24f64a09a619a95520982752dda80d51968c1e68a8b3d503e394233e27b22c3c196a4b59a9624278a6beaec3fafc0792422ef72748064f9492499d
- SSDEEP 96:CyPHCQBZXVEUgsfsGvTkhb8cDj2PcT1A0gIZVwS41/iylEkE/EdEhWLPppSy0mVa:XtZmECOPtZrCCkH
- TLSH
  T12D927AF15E1C3E9E0EC552629AD9500E10DF7DCC4C3910FAF8E78D19B989B0262F2AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  QLab 5.6/QLab.app/Contents/MacOS/QLab
- Size 33.4MB
- SHA256 b79f2f31d9fd71a27dfc7428e7bc2af0033911d41ad0e9d0d0553fce1d4dcd2a
- MD5 6d1290576f5a85e33738adc3b85e128c
- SHA1 6028c2b094cdc63e0e894672b79f3672bebc5a81
- SHA512 28af7b5b7c48ff07128e7035680c1be824653220352238512424cafe00a0f41a553557901cd70e11a91d8996c7028a1c79f7dca1361ddd4a99d7b53418def0ac
- SSDEEP 393216:4s8HAw+w2Xk96JagBCJ9BjjAeOWd1O+1wdALNgqRSZ5nl69EfXBR3wo:4DgC5a+W
- TLSH
  T1B7775A37F3181415C2A9727C0E2E472D8109EBF2DA70B7AB2C66904B2FE5CE90F656D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  QLab 5.6/QLab.app/Contents/PkgInfo
- Size 8B
- SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
- MD5 23b7d7d024abb0f558420e098800bf27
- SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
- SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
- MD5 SHA1 SHA512
Score

1^/10
behavioral24
- Target
  QLab 5.6/QLab.app/Contents/Resources/Base.lproj/changelog.html
- Size 138KB
- SHA256 77291f63f7cd4b1cf8431b72c981cc1cf1818513f406185eced877fbdd7c0631
- MD5 759e5a0cddaf4439c678d91d66fb027d
- SHA1 e78285212dd5fca8c82229a3de3587538503801d
- SHA512 393e036dbfc5ed12ba1b5758f8d665e96025637d10134c960dfdc42b904fcd031f9ff61bc0b6c09115e9ee5114aacf00cab7567b09f6699bd36269e4a3f6cf76
- SSDEEP 1536:m+iIRnqX4JeizUlNzbHKiw3DUcmDDTDEIeE4c+f5fEVHuWWJ7tmD6:UXTNz7KD3grDQI4c+BfGHZItmO
- TLSH
  T158D300E7EF77133A0373C0E3A299536066A4907DFB115AC516AE8734238DC10767FAA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral25
- Target
  QLab 5.6/QLab.app/Contents/Resources/Base.lproj/credits.html
- Size 24KB
- SHA256 edda83b9eb9c656d13a6fcc16bf8284cf6785e7b34be4f02d70a5b99935367f3
- MD5 304f6e5b8abbea191693d3a757963f4a
- SHA1 12a3dda3a51ed92e49d2b0ef5ea59f4a2d0779cb
- SHA512 ecfc7fa257d458f62564545ce310c5e17e5580ab14c4f99c2c1247f47804651b49b29e9ca538012611d6856b2368afb61b428018625b4cc09d5605767e71addb
- SSDEEP 768:6E4L5e4Yuxw54cD7zY9zBeOvpJmmF4uYM9OXbvrR:74/04CzYfeOvpJn4uYM9OXfR
- TLSH
  T119B2A6DA72D02F7302D292E126157FC9768A901BAA13190975BCF3946F2ED1EC5FF884
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral26
- Target
  QLab 5.6/QLab.app/Contents/Resources/Base.lproj/eula.rtf
- Size 20KB
- SHA256 6c8d73c1c4a3540cd54f4f5e6271bf209ec0f973e94774bc4afcd25299464c29
- MD5 b29c67de396e67d322708ad3c918b049
- SHA1 c2beeb88c1c16479192bb74e48cc0a5df9d5a0ae
- SHA512 eb283473d867efc74ef42b3139ccc0f1730cdbcd37204ce811fd11189a0beca4a07f2d5b9853f5c0a73e6b26f1c5a559e2e1c1c9e219c1be00e59ce6f1c09201
- SSDEEP 384:jTIxiJ8yAU6TdtU2Wvk6SXoAYoQaxM8WXLt7RL0Fu:jTSu8VtHU2WvTngQaxM8Wj0Fu
- TLSH
  T15D92D8BB7300177216C70352668698C6F32B837DFB7E9DA8A065D08D2362D7C92B7D94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral27
- Target
  QLab 5.6/QLab.app/Contents/Resources/LightDefinitions
- Size 3.1MB
- SHA256 0c47e9b1c82d0ba37ea0842e85e1603f1e8215a118d32c1a3bba6ced6a00db13
- MD5 1ddd63d039e5181e28d387d278d045f7
- SHA1 8ba21ae259f854730f6d0fb122e0d1530e0d779c
- SHA512 3412ed0aa688948c87faffe93395927515069d7be64e94081011cc84c5be8900aa580c238c10f59ed13f51da8e5c37d6a44d34a275b4c07932a37a3dac725df1
- SSDEEP 49152:QVd2I6Xi3pvbksL98jFwHgqlHKHUb5KtsUEfmEJXi/q0xELtnsNEi:IdRXtb95RHK059dpsqHe7
- TLSH
  T1A0E5E081B920C5D2F91A0121B8E29732B5E6390592BC5461BEDD7320E8CE4CD5DBF9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral28
- Target
  QLab 5.6/Open Gatekeeper friendly:com.apple.lastuseddate#PS
- Size 16B
- SHA256 2033f39562a37f8d0bc9fd35545f9ec65d328ed3ee01f41225126c349f409137
- MD5 e108157ccb4b465cede9a4f461865851
- SHA1 b483eb0a36292d0087212c9e810749c6207761ee
- SHA512 dfeaca9d8c8a408572b9d98953fcc45d8c60c5ad3496d364d761e70f958327fd4a72d90695796db68b7e6a929090b2c7217c4b32fadfbb72000a42ce08fc69fd
- MD5 SHA1 SHA512
Score

1^/10
behavioral29
- Target
  QLab 5.6/Open Gatekeeper friendly:com.apple.metadata_kMDLabel_mguxsx2wm2xfcldjqzv7hgz4we
- Size 137B
- SHA256 68809c5e5a3bdf57cc4510ab51c5af0a5017275b0cce04873994202194cebf15
- MD5 e04d6115229cecf0a2a320b7fbcc8eb2
- SHA1 c3aa3646877d4cbf4866e21b0b8714a32024118c
- SHA512 9ad3f3c0794caa6352dfa68638d48d176255bbf11760cccb5dc3d6088a04547b33acb85aaa0ff8a61f33704414b9cb87ea7670964a3be99251796dd5779082e3
- TLSH
  T16CC02B7CC1380F0BC44F58D06BDE0E412B81B42201BC0BB47A6F29559C0859106DBCDF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  QLab 5.6/Open Gatekeeper friendly:rsrc
- Size 419KB
- SHA256 4dd4e4e755cb3f40250c3beca9392bc5f6dc0c2ebdf77ffcafc2a20f12f4299d
- MD5 4db75a23fefe94e86abcaa5bdc667cb4
- SHA1 4512e7ae3d1aef9fbf163b3c5bcf312aecbd99d2
- SHA512 a7dee1590512bd69d7b261e087860e4bb640be3dcd525fdb769483a2401b89be98cfd102bbda9571090ea64a9f634a57d188413a6aca414e5388962c1900006a
- SSDEEP 12288:6SvvnqAC077fw5NlLC72sKsOzQVCJoMe+:7f7olG00VCJos
- TLSH
  T16494230B71190839F5D5D235E5B50D764BEF8C63A763C407F2B0BAA02ABEA161C6E513
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Discovery

File and Directory Discovery

T1083

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

File Deletion

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31