General
- Target 240722-2h7pasn845_pw_infected.zip
- Size 532KB
- Sample260730-pf3akshq7w
- SHA256 753b6de1c06477212319e2f911bedc4f79303b205ab1954b3a81939489876d3e
- MD5 58096ad639b319682907e916ad8b8a11
- SHA1 075f1d40582796f287e2eabdd588748fa5e774e5
- SHA512 adc1dad628a51d0eb5fe91fac6ee5a8b97995ae48f8acce1a468bf2844839838ec1f859a527ab51e1d91655369c0d5c77d2a8cb3dd2dde77e8999d682465999d
- SSDEEP 12288:Esgag55EsjzymfKYWxRW52qV08SHy8NMKAFzMTixRXua1:EPltWxY52qVsyQMKAFQ8+a1
- TLSH T1C2C423B2508331CEB6F01696E57D61521E642B64C17B08BE95BECDF4FAAC4B49C3920F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
VorionSetup.dmg
Resource
macos-20250619-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
VorionSetup/VorionSetup
Resource
macos-20250619-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target VorionSetup.dmg
- Size 558KB
- SHA256 259f4a11007572e9646f5f28a1d4a576181e9c854408f409ce409e7e2d6e7516
- MD5 58bc88866bbfe902f7116e4ec3b67e58
- SHA1 409d6e7aa65623e8896cb8a4bcb39adb87330ac2
- SHA512 3278a6b9f23a86e8a45fc71fa55175587243ba8651eebb70bc5b028abe862869d52aafd79832dee618f6290743bc5963c371886cbff4c28c12570b93df772b29
- SSDEEP 12288:q8WLk36o7Rli5cmY/rPzMsKg819nSNgqC0oiq2KlXgy2R5F:eLkPli5qPzM7nAgztBgln
- TLSH T1A0C423B4550C3D90DCA62E7ADAE5A1F90C2F4BB768F00484D1E73FE91267323ED5894A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target VorionSetup/VorionSetup
- Size 482KB
- SHA256 ee3e934a7efc79d8ae5324e4e5a8ae31639b2da687443f46acaabcd99b010339
- MD5 a2612e90551a4313cb3156c33915163e
- SHA1 a050ff95b4d9bae0361f9fc3abf38b2ff29c8b7c
- SHA512 138845ecb0146df4c31d0ffebebf66a12a9bd2e66fc94c1a153a0ab39e1e1a207966aa60943f4f5c1e35ae4ba26754cd5ed0305e217f858a7fbf6b8a0841f10a
- SSDEEP 12288:vXOC8iSh3CNvFC/rCKKDJCBtHO+7YOJG:uvYO
- TLSH T119B46D43064ACBD1E0D261B8BFDE67B1D160F8113F7BD54C7B4BEA666CB44A826D9203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Prompts the user for their password using a hidden input dialog
Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.