hxxps://links[.]dropbox[.]com/u/click?_t=60154b197d654466a40480a2b908d3b7&_m=06f69de6158f49fe976be977e0023d83&_e=SNN4290QE5jsgmKGR8aX4hsnPPPZkoc7C0tP3XGgtetKVPcu5zqsdOKIXjrtSEqVC7zvqfYiBG6QcQZTxV4XXWFkDSI_g1WR45-02pCZmnjXSSC7QMge8XyXm2frSAUFdZwVoKgIXiqbwRYGRNEAYZiHw8uDxNAwyFpDbRN097xuW4XW2qptUxRRPJylyLN8usQwv-6-3fqi1Irc8_gc6Zw5Y8Q9zKkNT28xr1xiKATHAbci0sau7e9zMbtK6YfwUHwDFlAOqe3H56_aYsYTNRyPDmUKI6pCiXvEBSX_Cv8BnYVXfxjikeZyK8HyeiU4LBLmKIArZKMSGFAurnghA7e5m2hxsMKzHE3feAv_TXxvO3pAYtZ5661Dmj_RsthpZ8lznxW0kisM85owIWtf8ALPeFCnHu5h08Xz-__8_uJqGGOBUPh3JUKhqKijGsggQBUSBfVmdwuONttjmOLVKUbePg89HNjCf6SvqBSRVyJ8qUVs0opweeHz8rXFMxl9uvr-_li3EgzuBl6_fV2mu3bdER4AtTpnJyiiG27mneiX0_PZVsFfnPQK7iF6vOA5U0cQTtxDWmIZHT3fo0Wppg%3D%3D&dbx_campid=16961184&dbx_src=email&dbx_track=AAKOmfYDnOIhycEq4k5qlwOTsGwwc6oCjK0dxmlFGCsHAZXW09jwkJfilkGZrxLxJ8euLGBJ-UNieYcMad26RYh7O8T2xyGeX4YLK50wAbrfTA

General

Target
https://links.dropbox.com/u/click?_t=60154b197d654466a40480a2b908d3b7&_m=06f69de6158f49fe976be977e0023d83&_e=SNN4290QE5jsgmKGR8aX4hsnPPPZkoc7C0tP3XGgtetKVPcu5zqsdOKIXjrtSEqVC7zvqfYiBG6QcQZTxV4XXWFkDSI_g1WR45-02pCZmnjXSSC7QMge8XyXm2frSAUFdZwVoKgIXiqbwRYGRNEAYZiHw8uDxNAwyFpDbRN097xuW4XW2qptUxRRPJylyLN8usQwv-6-3fqi1Irc8_gc6Zw5Y8Q9zKkNT28xr1xiKATHAbci0sau7e9zMbtK6YfwUHwDFlAOqe3H56_aYsYTNRyPDmUKI6pCiXvEBSX_Cv8BnYVXfxjikeZyK8HyeiU4LBLmKIArZKMSGFAurnghA7e5m2hxsMKzHE3feAv_TXxvO3pAYtZ5661Dmj_RsthpZ8lznxW0kisM85owIWtf8ALPeFCnHu5h08Xz-__8_uJqGGOBUPh3JUKhqKijGsggQBUSBfVmdwuONttjmOLVKUbePg89HNjCf6SvqBSRVyJ8qUVs0opweeHz8rXFMxl9uvr-_li3EgzuBl6_fV2mu3bdER4AtTpnJyiiG27mneiX0_PZVsFfnPQK7iF6vOA5U0cQTtxDWmIZHT3fo0Wppg%3D%3D&dbx_campid=16961184&dbx_src=email&dbx_track=AAKOmfYDnOIhycEq4k5qlwOTsGwwc6oCjK0dxmlFGCsHAZXW09jwkJfilkGZrxLxJ8euLGBJ-UNieYcMad26RYh7O8T2xyGeX4YLK50wAbrfTA
Sample260727-yfxvja1sft

Score

8^/10

Malware Config

Targets

- Target
  https://links.dropbox.com/u/click?_t=60154b197d654466a40480a2b908d3b7&_m=06f69de6158f49fe976be977e0023d83&_e=SNN4290QE5jsgmKGR8aX4hsnPPPZkoc7C0tP3XGgtetKVPcu5zqsdOKIXjrtSEqVC7zvqfYiBG6QcQZTxV4XXWFkDSI_g1WR45-02pCZmnjXSSC7QMge8XyXm2frSAUFdZwVoKgIXiqbwRYGRNEAYZiHw8uDxNAwyFpDbRN097xuW4XW2qptUxRRPJylyLN8usQwv-6-3fqi1Irc8_gc6Zw5Y8Q9zKkNT28xr1xiKATHAbci0sau7e9zMbtK6YfwUHwDFlAOqe3H56_aYsYTNRyPDmUKI6pCiXvEBSX_Cv8BnYVXfxjikeZyK8HyeiU4LBLmKIArZKMSGFAurnghA7e5m2hxsMKzHE3feAv_TXxvO3pAYtZ5661Dmj_RsthpZ8lznxW0kisM85owIWtf8ALPeFCnHu5h08Xz-__8_uJqGGOBUPh3JUKhqKijGsggQBUSBfVmdwuONttjmOLVKUbePg89HNjCf6SvqBSRVyJ8qUVs0opweeHz8rXFMxl9uvr-_li3EgzuBl6_fV2mu3bdER4AtTpnJyiiG27mneiX0_PZVsFfnPQK7iF6vOA5U0cQTtxDWmIZHT3fo0Wppg%3D%3D&dbx_campid=16961184&dbx_src=email&dbx_track=AAKOmfYDnOIhycEq4k5qlwOTsGwwc6oCjK0dxmlFGCsHAZXW09jwkJfilkGZrxLxJ8euLGBJ-UNieYcMad26RYh7O8T2xyGeX4YLK50wAbrfTA
Score

8^/10

defense_evasion discovery
- Path Permission
  Adversaries may modify directory permissions/attributes to evade access control lists (ACLs) and access protected files.
  defense_evasion
- Gatekeeper Bypass
  Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.
  defense_evasion
- File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
  defense_evasion
behavioral1