9c02ddfde6d1eccce9cbad0b68c3cf01e2a80c5090d8e7769ed5ce1e12209645

Sharing

Copy URL Twitter E-mail

General

Target
go-remote-mac-client-x64.dmg
Size 28.9MB
Sample260731-w1tx9seh36
SHA256 9c02ddfde6d1eccce9cbad0b68c3cf01e2a80c5090d8e7769ed5ce1e12209645
MD5 d966be5dff66e76e8b94ccf78157af4e
SHA1 e49e610146d8f6d4a209756cde31e4dffe9451d3
SHA512 301019123e179fd11bc33dbf04e6183b63ba20e133b9be3607f4b7de59f0ccb93219c7ccb648418070711f551866a063ca68f4dd794dfcc287cc8fb20ee5266a
SSDEEP 786432:8Gox0FvZUHsm6qrXRY4YcZPnsy0nChF76s+5M6jTpKTnsUYNz:lFRUHsm6CXeLaPnsTC3761WCTAsUq
TLSH
T1C067333231A70855F8ABEAB40A475371CD99AC6BBB4BCDF0C152BD725A7F0745338A09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  go-remote-mac-client-x64.dmg
- Size 28.9MB
- SHA256 9c02ddfde6d1eccce9cbad0b68c3cf01e2a80c5090d8e7769ed5ce1e12209645
- MD5 d966be5dff66e76e8b94ccf78157af4e
- SHA1 e49e610146d8f6d4a209756cde31e4dffe9451d3
- SHA512 301019123e179fd11bc33dbf04e6183b63ba20e133b9be3607f4b7de59f0ccb93219c7ccb648418070711f551866a063ca68f4dd794dfcc287cc8fb20ee5266a
- SSDEEP 786432:8Gox0FvZUHsm6qrXRY4YcZPnsy0nChF76s+5M6jTpKTnsUYNz:lFRUHsm6CXeLaPnsTC3761WCTAsUq
- TLSH
  T1C067333231A70855F8ABEAB40A475371CD99AC6BBB4BCDF0C152BD725A7F0745338A09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery
- Identifies devices as anti-VM
- Queries the hardware information (I/O Kit registry).
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
behavioral1
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/liblibrustdesk.dylib
- Size 31.9MB
- SHA256 9a025554f2c2e527fcd6f1eba90b3554964aa578f32eb9e55f9051345302153b
- MD5 85556503a8881a1a91f3483b41a8c344
- SHA1 399f99f1c464850a488b59d6c27a31c36b053528
- SHA512 60199ff9a98a508c50c63f79fe0d27cfd5939af27833ec6e5bbdd5c69156b8354a76f80e9b9898be07f4224d206995ea28e0ac0eb07173e0b573dea650f5ab66
- SSDEEP 393216:FL7+3I5wZ3FZ0RAuMYqGpzA6ekJKtMc+jgZ6hxo+qwyj:FX+45wZRSJZq6E+qwy
- TLSH
  T197777E2EA192A15CD107C4B053EF9BB2BB21783E05252B3A32D8A6313E76DD0575DF27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftAVFoundation.dylib
- Size 125KB
- SHA256 00e1cc1866d5d21de7176e97708773ff7b818a7eca8d6ea0f2c9265904a52fe3
- MD5 0d82642bcbd2e853ed9f6825c859673a
- SHA1 add10bcc6fc5eee07254ccf91562dc8378b4419f
- SHA512 0c54c1578d5954f5d547cceb9739a3aece697da11922e1bef64a9cdf2b58ff75d8be5f89d84a8000210953a55de0c930e296dee4f520320452c522673eae0399
- SSDEEP 768:FyJ9Lx9ibL6F0Yy89f55E5QTdwOwk1KBMuwv10zY9K9USiPxFmLwc2wlR4qTtGTt:Whx9ibuiYN9xuKTuIKKPv126luKVK
- TLSH
  T125C33D676796A42BC02D54B992FD15029170F30DB61213A9F3A167327A32E70FF4398F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftAppKit.dylib
- Size 217KB
- SHA256 60e9f42734a43c8627b63969037f70ed9e044d64ee26c96a93d5e72677ed20d5
- MD5 4cae106950046fd0ca5601fe4599936f
- SHA1 1c4ffd435fd838c14f0861eddff316ddf51939f3
- SHA512 052e8ce32dc3a231d828c50acde9fe9663f4aceabb696353d3c4984fa9279a676d4fd99dd73d09c76d4a8f1a37ec74fdb7205ea407dd7dbd7940e338b3a5a673
- SSDEEP 3072:P2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNrb:KoFP6r0vpGT8Ma0Ubx
- TLSH
  T1F5244B4723715E3BD66BE039CB6FD9080B24F6419A2613AE97A46531FEA57221F13C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCore.dylib
- Size 6.2MB
- SHA256 d8dfe2404f1b3ca054cd7f5b6f72f6f8f7aee6528dde071fadf7f741b2108cc4
- MD5 9eb42c5cd2c47a63aad327d61eaf2e2b
- SHA1 55c4daae4d29c775d0595e689391eb1f3d1ba523
- SHA512 d25d832bf85eca199ffa28b5795aed20a82deda45044a08e5968778db5bcd4adc4aeac2921b944f18c299c1b0ef16471f8207d2288381b1209c532a64729997d
- SSDEEP 98304:DgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:yolt7iI61wgwAm7Ag
- TLSH
  T1EB567C3F65A29D0DC2ADD070498F7A022871F4B157563DA417C4BA3A6FBAC91270EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreAudio.dylib
- Size 73KB
- SHA256 4505adc63a992653352f1f1eddaf2da88b26147a1daeb5a53c477ed7a2a3ffb3
- MD5 40509fc98de617ef5db44d660c744d28
- SHA1 2948227f577828fb66ddb5d24380b8ace3752542
- SHA512 4885498c29cdd1e307755dca1742eaeb0d6ada79363f52fffe6914eacb325eac37376fd49b622e56e63cce0e0040f97dc6a8df1c812fb22f88bc72e61de253b8
- SSDEEP 768:uRJVvoLxr/H6BC08N7zHQJj1GgH9XE8RZMab8:QWxuBC08mJj1GgH9UQZMK
- TLSH
  T1E77394D7EB567931C0B8F8F192F60EEA1721F040A9520264379545A62BB39F2364DFCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreData.dylib
- Size 96KB
- SHA256 4e4954fe05afe8d64be7287839d0b532d14c6d66cc88fd9549489a32b6b2fcd1
- MD5 848a161d56e4483170e7475404e32a66
- SHA1 03a05d2a16940479751f5c6e477664487468ff18
- SHA512 a785bcf696ad1018caa7d066eecfa7be2f4ef95f07b65677f4868c57e6f3dc5013c7be575cd28d694f556ddc26d81c19b0ee0032cd4d9d30ec71e9c8f1c1529e
- SSDEEP 3072:YSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcv:vF1by
- TLSH
  T150A383970BB6343BCA6A123341BBC9326870ED0B2FD669B697A14DF0259F664370750F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreFoundation.dylib
- Size 41KB
- SHA256 77b82f3ae45e67e7508aa70b37863845bb5b8085a3026cae944f1b3b92f2987f
- MD5 d83a22a108b93254550ececa19ea9f61
- SHA1 9eee0cdf95319a5aad709e9e48ef87c110347910
- SHA512 144a7170dd33cc184dfb2c3b13d9824dd7d1b070cef0e188fc979178409f00422b4a0d6bb08d5bfcb8fb0746c6d2df95a59c30a564744a3eb597d412a3777107
- SSDEEP 384:Sz338Sbg2r+Q8DrMpruGrEmVrNab8erE:SzH8SbD88ab8
- TLSH
  T1F7131AD707593425ED9D95B102CEA2829E72F2487F63106AF069D1F02B33BB42A574ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreGraphics.dylib
- Size 186KB
- SHA256 10cfd1c5e7cff83dd29e5ba7b6e23b8191648b3658ac005c9d674e8d4e4ee200
- MD5 bad7d83d06521d8e42aab880f5efcb5d
- SHA1 c2db0770624552437c70fc18a0ea28309ed4b8bf
- SHA512 c950dcf6e58ab5ebbaa9f668c8a9252a0ac77af3fdec5ce795982e8a3d050b5b175c7c1e8a5a08b88789032516fde4e0da72b7d5118d08d3a36ea9c85c366208
- SSDEEP 3072:la1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbOLGx:o1kJvHXD5LDAyvx
- TLSH
  T19D14D55BF6622C5CCC6DC8704EAE22513015FDF827A24B5E6BF051357966E306E12BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreImage.dylib
- Size 48KB
- SHA256 4a35108d9132ddf8417a14be5fa89b7de6e22e37621bc3e9ad6c92f761630c1d
- MD5 7a68e3f326938df33b9c62bd976d4b74
- SHA1 e15fab62e2571b74a2e7241ad07114597f507efe
- SHA512 11f94a80c94e24ad31afd57a618d4d08eac705f2f1c6b6e72f0dbab2fc28dddc3d4b154411abcef684bc645c58a1ac37e3b4b1633a56830cc00c83fd3b108e2c
- SSDEEP 384:5CykFfcr+Q8DrMZrqPyrOUrNab8erqXE:5Cykhm8rWab8rE
- TLSH
  T13823F8DB07787532EC98617055CAA3429E32F3997F6300AAB0A690B13E33F75196B5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftCoreMedia.dylib
- Size 85KB
- SHA256 8a2562f468fe78748e45b285aff4ff724aa15dabbeaa62854d9a4f282c4d8a0f
- MD5 24d846dfa741f5b8c811e6900bfa383c
- SHA1 28d91993fa0cac5f8ec999a690e284d64d0e4ca6
- SHA512 c439866c4108e36d09c20934694e73dae35392dee8b7165a4f5fe8a8d50e7fafd9ec9cdc016becd920b5a3b4de28dad57ee1149ecbcf5c5e8a1b4e4d231ad486
- SSDEEP 768:+xGsBIKH1bOKRckbE0GcSsfvRj8fbab8G:HsGs0KCeecFfFabK
- TLSH
  T1888308BB56506B27C65C84B8D48B57015932F3A0B703069D7BE715723BB2B30A70AB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftDarwin.dylib
- Size 96KB
- SHA256 da79deda7cfa9e9c6d186ec34f16cc577c7858010a991f65c76a6331d76d19a4
- MD5 a484f67de5edcb155ebf9f82da133bf5
- SHA1 315a3857a120756ce07461ad0894b73490dbf48f
- SHA512 196f2080cf7ca0d74973edd689d830e4db22a48dcce6d884258d2c656d60d556d22693b5d76f2c21ccd65db65589debb65e4bd98e2dbd9cfda199acaae4c23af
- SSDEEP 3072:gcicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIoheH:gcs1elxD8DBnVK4rywrcXARZTFW6D5Bk
- TLSH
  T17BA3E69E6E63B827D621D835C8A767918933F5F84F0276195F98F0BE0E32BC0354291E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftDispatch.dylib
- Size 320KB
- SHA256 edc326dca98a1b1a5ef4975ae68f04fd0d2523915f7953bea9aefd106af7da66
- MD5 5bfe0e093d3066090c911f189a2b3b6e
- SHA1 033220d5d5ca694f0dd2faa2bcc211a72b0971bc
- SHA512 11720b36614a76362e533bd649ca47991e3f05141b589e418af91fe3944f01a21075032f8a072cf74f351c70db3f73ffffdb1a73db0c02036e8a5a14681bab4d
- SSDEEP 3072:po5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQYe88:+5R9iqOEcKbAgHMWbBZ7oS1bh58
- TLSH
  T1BF64A6FA92E64E24C434807883BF79221723F470D3712768D764B2A56E7ED546E1FE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftFoundation.dylib
- Size 3.0MB
- SHA256 f45d87cd12a55c41b71eb4f8da7ca9e18b51d91653e89131a9090e478abc401b
- MD5 7f4614a2fd966eb18365e026687ebaae
- SHA1 9248875d5b92371df6ececb3cadd48da1496b535
- SHA512 62aa931a08221f93d741699f2850e2ff5d130cc8f9722fc9866a463b98b4a234f763f80b97124f1c7d666bddd2898fa88da1de1832f727e013a5ad1bbfdce183
- SSDEEP 49152:rwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:cCd1cNn4p/X0fVYtBGt1GK3
- TLSH
  T1B6E5386B9F33A81CC17F807215BF69502530FB97B8523DFAE3945B741BE9861178A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftIOKit.dylib
- Size 44KB
- SHA256 e4cc728ea9f306c2590ea238788e9db0d02520c401341c00e30fefe337068f86
- MD5 cc96106938857e41719f672830d1e59b
- SHA1 bb5d10195274bd47b25d96fd7914cb0a1858750e
- SHA512 c8931cc1debad72a74515a633d33fd4db0ce2af0df409bc5c49f50209feeb78a7d1547654368704e63e0442b832a42480872a45c9a9064226b01a12462fea8ea
- SSDEEP 384:NXz+C9eUdz1Fr+Q8DrMprnrEmVrNab8er:NXZz18qab8
- TLSH
  T14D23D57F0F226331EC54D1B1C48749C11976F2186E930081A3A6F5E2392EB75BA2B66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftMetal.dylib
- Size 82KB
- SHA256 9aafa807034025a7f31f414ed4c326e0031c854e9578a6cf7b0c618e17b491a0
- MD5 981d57cad9cc65503dfea0ce7d9a9e02
- SHA1 2380c73185d956db2e67fab32b96429c1ebe115f
- SHA512 8c16d16ea40edb8135a977258f3747611040e82f7c8b4ef4d2594d95ea780e46716b936ebe89c8707f609dfd3f1ec8f489bd3ed5cc2399c03d70bb2ff3515cfc
- SSDEEP 768:/Lcjr+chkNwxGlsMg/Knbekt+9PPGFP2/x8iA2ab8:gjrDkNwxGlsMgybekt+9PWu/xhA2K
- TLSH
  T192831A932A547421CD6C517601DF2A832931B682BE12566F73D187E65F33F8B34239EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftObjectiveC.dylib
- Size 60KB
- SHA256 7162f056d0ea16f23b304150ddfd5c49f1d664aade7fe6cc7a28d6b8948d0a22
- MD5 2b8a93127299de80d29bcd470b6f06bf
- SHA1 3d44befcf73e83832642adcd9742da30117c7687
- SHA512 99f8246fcf5cb51543f30ed1c24a2eed791868dac35f0423ea555763d27d47e326c52cacd8fe1b165ab4c73cc34113120fe2536a11e983adf040ab9534a588a9
- SSDEEP 768:ZkOEK3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmEs8V8ab8:OtCVRg8K
- TLSH
  T192531A636220F855C999C0B201DEA394C9D1F1C5AB4396DAF3A0C5FD9B9B2703B1678F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftQuartzCore.dylib
- Size 56KB
- SHA256 4c7e0e11930cb3d09a8e65cf9baedd8bacd194fed202de8c3f1ab6ce73b2c443
- MD5 d2fbdb1433b2248654beff05287f00c8
- SHA1 756325ebd33f02fee808dc4fe6e00d2fb08fa97f
- SHA512 397b9be50677907e9c576e913362bae33380baeaea356d780a7b3cc685432d187ec1ca6ff8cd38573831f8d122329e81e76562237182d765d9ca202da17e5105
- SSDEEP 384:zz5iXgVbo4Kr+Q8DrMZrXQrOUrNab8er:zz5Yic4w8igab8
- TLSH
  T175431A5B2B4DB011DC18917443CA6B52B971F348BF6B10DAB061B1A53E33FB42963D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftXPC.dylib
- Size 44KB
- SHA256 98a9fdbb570a925dd2ee44854ef8796e625b83152e7ede89565e9a918c0eac8b
- MD5 ffd77ad9d24a5b967567002446fc3be0
- SHA1 9e73021b0034cbd05b93a4441e168fc4e3cd2419
- SHA512 f8253865108c6f871d3ca540934d493b7c05d2487b71f887b810af70643cc1f9cd2623a67e78c26c9945c4ff49352155b41caf2a1c58f55d175b1570f94d8846
- SSDEEP 384:9z5/PHP/L2Bo0r+Q8DrMZrY5YrOUrNab8erm:9z9/iCe8toab8R
- TLSH
  T14B23085727607C52EC894036018AD28289F3F2543FAA019EB1E690B01F77BF66E5B7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftos.dylib
- Size 70KB
- SHA256 3808f0c52af7b85932c81f1d0e267e893dadc1951487d60591fed0050c0a7637
- MD5 142ae4b4c2e20b798cc4cbcb76e75986
- SHA1 1c29b75a0ad173d8575a733b28a2cde1f8572092
- SHA512 b725a286e1607631af4a043c83e05449c2126075f27da4ce624c4e20b43d27796dc7fb4ad7dd4bae62474cf6087a4fb5d3b7798d6ffbd795b2807bb40d1e480f
- SSDEEP 1536:+EvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwOC2Kx:+EJHmB
- TLSH
  T11C635A6B2A28F424C49C807B064E97637F72F10D6F051599F3E8A1B17FB2FA2151768E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  MyApp/go-remote-mac-client.app/Contents/Frameworks/libswiftsimd.dylib
- Size 311KB
- SHA256 23f8e42dd107487b060e6154d228563cd430bcfc82cd027e4ad49613be055c8d
- MD5 c88c87f79de38750d14f5ce82b881df8
- SHA1 66bf1899a4e78a06c48d1a99e5d00c8bb6b41209
- SHA512 cc23318036ed61c82405917af54c6c435c35e82cadf46fc27dd906588e451f711db54f952d8255556e869cf7727a759fa33f387f6065eda8bba990b5c5a31eaf
- SSDEEP 3072:YB2SD9iFyuHwRHr7MONZ2WZay3KU/V4MsXYt4rl8hzZPDDaWrtlkvXTb5rsI:SQwRfMONZ203KbMsXryT7D5RGvjB1
- TLSH
  T1D864B72E1B793E3AD362D431C80F1E1BA631F560077D9D9A53E0347B6A61AA11E43E4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  MyApp/go-remote-mac-client.app/Contents/MacOS/go-remote-mac-client
- Size 117KB
- SHA256 18766c00468e2239887b57c0c14024711d9bb80705d537ece52fbf7335a3a99b
- MD5 c7de19f180da16688741ea11822df8bb
- SHA1 f0be33b333414cb0b1d5e28ef58594955f267d72
- SHA512 6b79f54e908dca75c62d758a76efaaf999a7ec39b52b80a976d9a56c701cfff3e83fd77c14f9c457eb30bb08ac5cd6bcaaa1cc5064573fcab14358fd248fcf1f
- SSDEEP 3072:iNhFiuqh72xt/0lYrL0ktvuB2sTujKuwzg:yLaaxtUY/0ktvuB2smKuz
- TLSH
  T1AAC35C93E774195AC5B98974845F77625036FE449F23D207A360D2612FBBBB02A03ACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  MyApp/go-remote-mac-client.app/Contents/MacOS/service
- Size 6.5MB
- SHA256 16f99f1b415792b4a969e30d05ba09058cb4d74ca08201e894e87725ec045965
- MD5 03ee1119de46ee8a36878c2eb3900e25
- SHA1 df2d877a57fcc8b19e30e83d83611512cb88f175
- SHA512 8e9154464aecfddb2492b39492519abe8eff57d9853f07748c21175d47ffe0a349d5db2fbc07955cf4e5e39b35f8c0630b0c8133fd7803128213140f1ba21c7f
- SSDEEP 98304:yWJkyedWy1FWifq5QGNN8NiIzMI2B2YBps1YpD7/R9asHEdR+fCldiT0:BtXIKP7Mnp
- TLSH
  T15A666B6AB361A52CD10BC8B057EE9BE25525BCBE4031676E27D46B322E72CD41B0DF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Identifies devices as anti-VM

Queries the hardware information (I/O Kit registry).

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23