ebad4e76f0a88941f1628d2c4cc6365ec769a8e52046911a3618e0f34661748c

Sharing

Copy URL Twitter E-mail

General

Target
Farrago 2.1.5 [TNT](2).dmg
Size 46.5MB
Sample260804-rmvkessemd
SHA256 ebad4e76f0a88941f1628d2c4cc6365ec769a8e52046911a3618e0f34661748c
MD5 ee2cb95f8129f1341005bb5538464c2d
SHA1 852c72ba39ac269a1e2201ba0b53d6b6f845b5eb
SHA512 503ba7e499e5db375e45f14d50c245cfd9d4286f7048e54b1a66f63af582097a8a5c945d725d8155a1aaff0c26fa1172a24add9c1dae9c0d54be3c4acb4452d4
SSDEEP 786432:7tYzRBJpzsJS4DVy+fO/vaKuBFf2d1C9TrlbGl7Q4GgMSIUf1kctyOc4ZtQU2oE:7QbJpzsJS4qmBFff9TrytGaDf1hc4Ztw
TLSH
T162B73333AB21DB14E10F6B3C0BED9761BE718D33A741417684117F9127B6AEC8A563E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

defense_evasion macos

Malware Config

Targets

- Target
  Farrago 2.1.5 [TNT](2).dmg
- Size 46.5MB
- SHA256 ebad4e76f0a88941f1628d2c4cc6365ec769a8e52046911a3618e0f34661748c
- MD5 ee2cb95f8129f1341005bb5538464c2d
- SHA1 852c72ba39ac269a1e2201ba0b53d6b6f845b5eb
- SHA512 503ba7e499e5db375e45f14d50c245cfd9d4286f7048e54b1a66f63af582097a8a5c945d725d8155a1aaff0c26fa1172a24add9c1dae9c0d54be3c4acb4452d4
- SSDEEP 786432:7tYzRBJpzsJS4DVy+fO/vaKuBFf2d1C9TrlbGl7Q4GgMSIUf1kctyOc4ZtQU2oE:7QbJpzsJS4qmBFff9TrytGaDf1hc4Ztw
- TLSH
  T162B73333AB21DB14E10F6B3C0BED9761BE718D33A741417684117F9127B6AEC8A563E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Farrago 2.1.5/.DS_Store
- Size 10KB
- SHA256 a0cc2b0222594adb57ec97416afbb07ad5a205891d10dd0d34f960cc2f4538b5
- MD5 b6a134bdf78a68391be24af21a18cf5c
- SHA1 27fc8df0d3ff73f1ba2e85a1a559cc97e98cde49
- SHA512 341eb4ae33808cf4efce92ab227e10a5803a2b58f3eb941f013ef1c865eab624234157ebfc328860f5c9d6598b2ed3dc9bad072db7791f61f60703251804b349
- SSDEEP 96:2gKcPj3yuFWm9tG/7eNV6zX4iNR8q6zX40:l/3yuQK2CX
- TLSH
  T1D222F201BBC5486FF9670B71C99387216B35D06CFB76874B121A15F49D22BD61F22AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Farrago 2.1.5/.VolumeIcon.icns
- Size 376KB
- SHA256 f0167881a1b0af33217816ca50d48345b2767bf60c9ca38826e2d8fecf9cce94
- MD5 61f79527e373ea03ca7728d05abcbd40
- SHA1 54497b3361d9cc88fdf5a84fa4319cdd89bf7cf4
- SHA512 68945ecd528a4f02949a244d5777c0eef92aca646a603a4ff509f755fb099c9ea151db78532f697d140315a62ab2e79b921b286115e2249a7bfe40cb8fd235c7
- SSDEEP 6144:lFXa4RoBgHi5NMjukHi1nMhae0QnPHRkeTcDjT+rF9bPDppHFsrf1AnNyP:lQBdMqkHi1nMMnLD0tPDPHyrf1IN
- TLSH
  T171841302739702A8D1CEAF7624761B40CB606EB9DF02123D58CAF439E77675C8C69BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#PS
- Size 16B
- SHA256 f3f12c5e43f532a6660bfb707f2066ae993538025a6a4bc52a90e58a27a8134e
- MD5 19224b829285e4dea082fb89560695d2
- SHA1 a1660f0ea715319e9dd8c38689bbdca4fecfa57a
- SHA512 4c1fbb792f5d0c37cb18033f537df2ccdf0901cb6a840e371089897fd161a64eac061dd03cc270f5bb0002d16c177be67910bb18c91808c1259debe4212d935f
- MD5 SHA1 SHA512
Score

1^/10
behavioral4
- Target
  Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl
- Size 72B
- SHA256 bf87935551fe79b8d6161ff5f7132ff1899883f75b0fce5d64ffe9b4715a2c67
- MD5 06255dbc70d5aec1bc9d06fe14789a9d
- SHA1 985052dc8b9fd8c95535b1579402c20b23e1ca53
- SHA512 1107481fe3ffc792540fb854b9dad9aee56b86a242ede045e0d0e87ef51ee0c92201570fba90b753ce2776372977e5d7c3f552527d67446f33f59137debb3f96
- MD5 SHA1 SHA512
Score

1^/10
behavioral5
- Target
  Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine
- Size 22B
- SHA256 53a355bf83c012a82a6f727b1eefa96919791e3a4fb9b64f1cbeaa0bc4505f8c
- MD5 a200809dcff602f0873c924e4922e805
- SHA1 688116e29625cbbd2f60628ea97cb8ef3d5bd0b6
- SHA512 e4b652e52188568ecfbd294ce1b90b532129b3bd596cb15dc4d3f88738fc2aa454c99d1e43bc7c2bb9dba99899fb5b1bfb112a18a78a398d6d0c4cf1e0968bbf
- MD5 SHA1 SHA512
Score

1^/10
behavioral6
- Target
  Farrago 2.1.5/.background/bg.png
- Size 86KB
- SHA256 9767cbc6f03421fb8abb858eae12fd63790f99e2344d907ef0986ea8330b439c
- MD5 ccccdbebe8a63d52a5634c575562a7ef
- SHA1 f22b7e39aa29a01e5784d08aae8557127f0bee75
- SHA512 df62a14b093774928a50d69008fc5cd9d52088660d77abd6a457fe24d0413db62e6cd7245d4edabc035d41a0dcaced0cc38a2512bc2e2820b353451de72229e1
- SSDEEP 1536:naqDHpS/84VwZCQDfNucLv3Kk8OP3B++9d78yrtCsZ5an0QhIiRs:nO84uCQpr8KNddVHoa
- TLSH
  T13A931267E764773FF8E26777DABC46FC5C5B2616BB70E49014A0A3902A88813B50E0DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#PS
- Size 16B
- SHA256 fe3875b849855a5b29f469c6e9c73120942e369c6d91c4708e2efb39351fba49
- MD5 d8958234ceceefa7384b401e23f240aa
- SHA1 1e0326a42380ad1b8e493c360b38f947f376dc73
- SHA512 fab0e92069ed34b964c4b10609c78302a9b94b6d6a598050cf4441a21ffb0653883307088b6225fe6a2106a8b2e451c8762754942cfd6067ca516939f2bec13a
- MD5 SHA1 SHA512
Score

1^/10
behavioral8
- Target
  Farrago 2.1.5/.background/bg.png:com.apple.macl
- Size 72B
- SHA256 b51d79f2cfffaf62a5cd2bc33ffecbb8c007d03b8e705222d283525e88eb77b5
- MD5 aff632836c1164c3992766c106b57f8d
- SHA1 304c76f5622207b015bd917088978bb010db73a5
- SHA512 d6e0c235a5a1fd4c7304dfc7fd0b3ce138b00a6731f9e71bfd046034ca32708a2a3e0621d0dd4c3c23702841abebc7403275deea01409a68a5265edf803bd93e
- TLSH
  T103A0044C34555577C335447C03C0544143C451C410C0C10F3D14D17011044D01D40100
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  Farrago 2.1.5/.background/bg.png:com.apple.metadata__kMDItemUserTags
- Size 42B
- SHA256 aad02e1bbbb00b10402fb9abc3fb93c5eee7df168946b1f75bbdb510b6763a1f
- MD5 3d641df340a8a0121793c0a077da61b1
- SHA1 44668804d8d14412ba09d3625109dfacb70e5476
- SHA512 e67f6a03bd110b718bccd0519b71db6c9473e4cf4eca2254cd81ef703a768ef81300e173010ab184657efa3f67284d139f23afcd6e0071332240f6195a0fcf77
- MD5 SHA1 SHA512
Score

1^/10
behavioral10
- Target
  Farrago 2.1.5/.background/bg.png:com.apple.quarantine
- Size 22B
- SHA256 028bbbaa4e930a80e219115e7d36233868f128d3fed2c5c8c3b8ffbbb408fbd2
- MD5 5ddf174686650e468949ffbd37da2375
- SHA1 f066f2210fa52581c6b3977096d0add2eac87614
- SHA512 71663216854a30de892a4f9150cbef9890c1e773b66dcdb91d5f0f69a3be2762d89d6da67bc84cd03c4e348dbad79da332330e008d532276bfd19634df87b854
- MD5 SHA1 SHA512
Score

1^/10
behavioral11
- Target
  Farrago 2.1.5/Help.txt
- Size 1KB
- SHA256 785735620545afa1a8354b159c2cce0aad84534b2600b47015bd11918e4cfc7a
- MD5 e64906f0344c9c0776fc8331f2b6fffe
- SHA1 0553b68197e057b1ae4aabb0c499089e2edd4f48
- SHA512 82ef3a4cde7ff7e205a569ca5175805342fac1073e1a9fc8f45f12cbefe709f199ecf7a8560e9956d1499c825e2c4787c70679d5fe164d4d6b42c4f7d88a4c20
- TLSH
  T1E931C0589DA605DD0602756FEC09DE4C7EFA80BF3BF6632600E8A81F3693524C23685A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  Farrago 2.1.5/Help.txt:com.apple.metadata_kMDLabel_dnftphl3a2xxyn2rmlkjb7ynxa
- Size 89B
- SHA256 2a341555048df0a37df3227d9f3190c57751114f605e8c0456f0aa4672bdb829
- MD5 91d7387467af8025b34179eaec85926d
- SHA1 c6cf933558aa7c77a79959cd7461d3d5c3d8ced6
- SHA512 4554e1ff477d0ff2b243b38e07476b87a31656a96d621245504e4b6e8a22d7935a5858e0f7f85ce65f9a9724b6fd2b1a21a9b42798e217f105db1db05355fd6e
- TLSH
  T10CB01231144B8CE841010429500C05B075498427F21BD191C49E73CA104006054000AD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13
- Target
  Farrago 2.1.5/Help.txt:rsrc
- Size 269KB
- SHA256 4de8692d088a30eecea856d70870dd475c30a462607c8f80bb9b41d6ffc70834
- MD5 2dfe4fc75468c97dfa2516288e6959c2
- SHA1 45b290ff6034d2fd299d5510f9c17bf962613bf1
- SHA512 794d897a2a05468c5244553a971bd0269bb08db58ffd2da3ee3ea99c52998677080b9f5991ac4535c10e892350eeed41c5f79c83d5f5f1982bfdffc873f2d85b
- SSDEEP 6144:dpN5TSLG3NVtQW6kkkaJRiI34CidYmnoqyDY:HHTh3azNJz34sZqyDY
- TLSH
  T11E441258060ED491E308B67F0A3901A06B26EF01AFB58F6F3698F131F4BEE574D4691E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
- Size 43.3MB
- SHA256 d08fb3197f2279c0ffe3f23afe3f4f0fb5fa12dd42b46209b5f4793a3719ef53
- MD5 be0524ffed29662c9071728c5c96eefa
- SHA1 5173b56a141d1a1d5a595d70570b7f2be36ce247
- SHA512 5554309b16b8ae34c79f97c85e99d8787f40582b937de5155f4988aa4d5d020fe3dde3606c88126bfe6f3c3234ac9cb925dd8086f853565124892bb00737bd4e
- SSDEEP 786432:jYzRBJpzsJS4DVy+fO/vaKuBFf2d1C9TrlbGl7Q4GgMSIUf1kctyOc4ZtQU2o:ObJpzsJS4qmBFff9TrytGaDf1hc4Zt7
- TLSH
  T17AA73333AB71DB14E11F2A3C4BDED7657E718923A345817684113F8227B2AEC86573E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib
- Size 48KB
- SHA256 53890a2efb43fc9e9a41f39b76178cf11c0349b29d6282076806460ece505ac4
- MD5 a59c622a1daf63a84bb5662cd5090b86
- SHA1 e3dd8ba91bc70413c8498aba4d369f72712c84fa
- SHA512 1ce28f2aba80314ac76a0598950ee4a83e531aa74401c333739896a7024d332c66b15722419822c9249df4f040fd90b1b7d39f35ccaa73bbe633aa45062835af
- SSDEEP 1536:5xhtwJGKemZ7QqawP/zrz9dMpgjKP9dcf9dpD+xsN:AGKe67QqV9KPqR+xsN
- TLSH
  T16433085E2EF8D328D5AF813234507AD2AE3C7E70577553041070B6BC45F74C4AA6AB6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral16
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib
- Size 57KB
- SHA256 8a22456bdeff9062e20b9c2a7c9b3eb706316f5d447c00e6c0c944307e5e00f5
- MD5 4f1876bb54f9e398148a8d64b590397b
- SHA1 211b6620c384a155fa590c2ca49e9fd533e5510e
- SHA512 eda09f89570695893d91f27d1f6b78a4374187bbbb57d8b6b95d2b56f6cdeeb9f4106b432c5607968cbd125170692d5081150aaf837219c42ffe2557714d1ddb
- SSDEEP 768:99rP8pKZalRUYyybGXPX4L3FLYyld9QdXVXdRUYymXMRUYyuzFD7L5Dpn:/rEpKZalKp/gNQfXdKiXMK8Z
- TLSH
  T1A0433B171F684258D47B81365EE197CD3E3FBE224760D7489871BA3F8073980A693BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral17
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav
- Size 400KB
- SHA256 1b6ae58fc6f6c25b6ff6cdcc2949d679f55fd51db1196a821e982f460cab7656
- MD5 b54fac077cc3ca85d1b698953cf1ddce
- SHA1 0b5d0e20a17d26052f4caa8627b5e69043f1405d
- SHA512 9436ad81f8059374ecacb2056dc78b65d31f17becaa5ed95b139105b46b8176948850cca78ccac60470138d266e23c7f88063bd4bb94157f0ef8ac2f1bcb1094
- SSDEEP 6144:7LnjietQozkmzjV9m5MebIYHgaj9MTaPdKt6O/pIuvA2HK:7Ln2UQoo0jVuMepOTaPQN/pIuYF
- TLSH
  T12094B38B760113CBF800193FC9CBEB8A5101F4652857E58F6543EF3BBA43A5A96E3971
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral18
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/04CED452-83D0-45B7-BC01-12D109CA35FB
- Size 4KB
- SHA256 62301191e9739c7d328c428e392d864ad10d26b9c45de7454f9ae406802df3e9
- MD5 eb6ceadc3df17673a65134db9e2532e7
- SHA1 dcef44df54f1e91578266800c56120b3411715c3
- SHA512 675568423d821cb35afc7feb9bd4851ccd8a0360dc845cd277f5f566c9409b747ad764feb7d0f0ae02d36ef698fa4391309db586bb5f9bf8eebcfba9cafc27ea
- SSDEEP 96:WrJa4T1pJBmB9rLiZgVv6WFNdq2XgIVnWg76JkcfbUKWp6Fd12vOTA:WrJrJBmTLiKVvTFNdqx6Pib7A2TA
- TLSH
  T1FEA16024FA7A5FE1DC0D0B3BA4B78C8D2BE4D648D5F51665070CA6AE0D372101FA3548
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral19
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/4AC951BA-1E71-431E-BB24-00CC863B1315
- Size 4KB
- SHA256 751a726f9aba1e89968fa59182569e60f173a384cec3dac6d9f578b6dd6aa166
- MD5 6382f91d0a983556ea1ff8edc9a4fc40
- SHA1 2d4b9506dd5354868fd26ee18e4fe1da63428c57
- SHA512 abb0d8e50c63a8f95c345738cd418dc6242116554e1223154aaf4874db5768550c6f3ebbfa390c8530df3030b71971d9816c29cf09ac82d19b77502d281e12ef
- SSDEEP 96:f55cV2lPqQCORl9Hp33WygCE8O5gwYc7M6AqQHtgGisY/MxRsKq:h24tqQC+9Hp33wTNgwf7MBqQSOJ4
- TLSH
  T1E6A11C54EA758FE6EC5E1B3BA0B34D9C2FE4D946C5BA65A1870C752D5D332402BA3408
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral20
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/B9B27D7A-E51D-449A-BA84-B7CAD3E8BEB5
- Size 5KB
- SHA256 23bc239f207116153e24899716d6eee062f7fed14bddc8fc1b1025db74c52453
- MD5 c39448a836c75bb7a4b1ad8d9e67107b
- SHA1 715fb56875ab403c63b4256b692009131409747f
- SHA512 b5fb8379310aa2938515f5d9aded254655040ac21e4d18315048be248607297965b5dc1765607af7edffe0bca223a74ae17687c0163c6ae49511f6efab4ff322
- SSDEEP 96:LFTdR+5ABSw/6PHryQk1su0nZa2xq+kQUX:ZTqAB9/HvWu0nZxzTQ
- TLSH
  T13EB10AC67E4C4EE0FA8795330523E94F8EC09E4259F551705B6CAE1D0533AFA43A398A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral21
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/E8A7D178-1E7B-404A-A89C-48CA2516BA6B
- Size 4KB
- SHA256 a60b4ca13e5697be8780de08ec60b9a5bf8e1599db2e8a73c0f8515f6806a382
- MD5 d2f7a1a9c129c060272dbbc48bf8b237
- SHA1 0d99897261143808c3a64fb1039c9e0287d41a1e
- SHA512 f2e2f2a81f19b48465f60ed51a6f203d7307c6caa853e399a1cf8cf215c9ed8169cd83fcf74c836d30e64390fcf65db6fc9e96da83ba49e039816208ba006d69
- SSDEEP 96:52rZPLivXvHd8y9WL5ORTiAgtqLoIiqvBfsPshf7f:5qpuvF3U0RHeq8HSf/hD
- TLSH
  T170B14F45AA65EFE2F99D1737AEB38C9C2ED4C544D8F964600B0DF62D58366206BF308C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral22
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Files/04CED452-83D0-45B7-BC01-12D109CA35FB.m4a
- Size 150KB
- SHA256 13bb5dc207847824bbfc94d35aab675acf43039f2073eb12c86124885c2f4fc0
- MD5 b2d06a339939fed62aee1284a250d49c
- SHA1 f733fba2d235646a427b6672fb242783d4a2d568
- SHA512 4c794f8697fdb7d066cb4a0d4aa35087c2a8160b2c310495a37732c81cc05e177b48a35cb5bc671d53648a432147613bb089d6168272cf09b84776c813059d08
- SSDEEP 3072:W6fd3Q/YkmPxhuM7zxjN5pIgaYMjxsTwe2FvylTLBRFQXz:WEd9PJhuczRN5axYM4o3D
- TLSH
  T1FAE312EDF362EF41E4C529BD00CDE92135526FCDF98E487AB6061F88080D8F9452A67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral23
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Files/4AC951BA-1E71-431E-BB24-00CC863B1315.m4a
- Size 34KB
- SHA256 cbacf2c67f3c91537a593ceb42f242cc19526a745ceb974974e050405e2480da
- MD5 83557455a97986005dc82a2a8b807d6b
- SHA1 eb9a643439cb75c1dd07f410e63e008a5d004dae
- SHA512 ab3083dbd2813a67999ba2db8cc4319918ef970400cfdb3911f5a5e1721844f293a0b51c9aca92101466c33cd5e82fcac6072f0b67bda209fd34c10567bdb1b0
- SSDEEP 768:5VSa2fD1J3mBqv9JHByltc5tYo2WIV+C7BBYjHZUC:5VSN3mkvjhVDJuV+C7kzZv
- TLSH
  T1B6F2E0375754CBB5F25F4B7418A8E3AE211C9CF466AA2484D1D424BF1738B2C2889FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral24
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg
- Size 468B
- SHA256 da7a2499061e4190b7b0d7dbbb9dd9149ecf2aae6e175fc00e31cf3e073f443a
- MD5 02a1f16963da10f788950d60f7820d43
- SHA1 bffc8397fc09efce19202c6bab8e1b8efd09bd07
- SHA512 de05f194b61c4e6e62418eae11726035b29939426697d186b5f98b9081d2b9763049c15e55286e1cf83bdf4cee815f26d751788d33f77545a02e256cb960e7f6
- TLSH
  T1C3F02E255348985CAE49C0F4FEACF1929C35218510186C54F627F2A055C8CF7242F669
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral25
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg
- Size 551B
- SHA256 7846a57744e5c194ce6976687aa0c0304d664f7b84b788721b2bd3b02bcd8b3c
- MD5 8eb1172bc6f4573f1e227cc2c98df7a0
- SHA1 b1f4f34f72f87d2594edd858f90e8cf07286e12d
- SHA512 fcfbe09fd6f9fdd2503ba0ca39449afb72e75bb5fb83d94a87b7812d9ebf1a0eb1c27ae51590cc2e5fb6777e1eba472069295d6f02941c328a0c027b31a9d673
- TLSH
  T1C4F044AA920481CA2B870BB0EDDA5F6298276AC8910D0F007471FDE5F0F37D6DF90C15
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral26
- Target
  Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg
- Size 2KB
- SHA256 5d31b45b930148f327eae8e76a80f24f357a112c802a5488b27c24cb3110a373
- MD5 3faaf406d17f1366b3cf42ad96d49547
- SHA1 73eda97cf90cd3d5b6bb1e9cf690a849dffae4b8
- SHA512 936b3f0d7a255f0833e83f3c28cae1920cf5ebe3851ffac6d5a823e27ef78d06f512e02a37f3a6fccaee8dd4ebee1046eec059355b69c3a9c96756af9ffc316c
- TLSH
  T16C4142AF975CB1F4BB0E7B60A7AD1524AB8B34AE072240164B906DD7973608ED041EC3
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral27
- Target
  Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
- Size 201KB
- SHA256 de682f7d7d44f442ae8fb7597c8442c8029aa8b43adfcaacfd9a8397101e66a2
- MD5 a72d73eaf6fbd5e9be865ea5c7e85b17
- SHA1 84b01404daabded91471f45798589d5550d9e9bc
- SHA512 dbbf03ab82ab7df4709dad9a6ced7a7aa196929f70fa80cf15e90c1d7b6df6cff92ee8e052b85fc3a716ac4cd808a0a3d6666ed3376c12c2d20c7d8dadd53506
- SSDEEP 3072:58Bxo5jbTzur+xc2bQ2u+zNSofZcnUSulJ:yBxo5jH3c5UzNSofZcUD
- TLSH
  T1CB145B433B681C89CA1DB63D4C87E3518833FA856F13821AF691C9691FBF7B5A1039D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#PS
- Size 16B
- SHA256 2033f39562a37f8d0bc9fd35545f9ec65d328ed3ee01f41225126c349f409137
- MD5 e108157ccb4b465cede9a4f461865851
- SHA1 b483eb0a36292d0087212c9e810749c6207761ee
- SHA512 dfeaca9d8c8a408572b9d98953fcc45d8c60c5ad3496d364d761e70f958327fd4a72d90695796db68b7e6a929090b2c7217c4b32fadfbb72000a42ce08fc69fd
- MD5 SHA1 SHA512
Score

1^/10
behavioral29
- Target
  Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kMDLabel_mguxsx2wm2xfcldjqzv7hgz4we
- Size 137B
- SHA256 68809c5e5a3bdf57cc4510ab51c5af0a5017275b0cce04873994202194cebf15
- MD5 e04d6115229cecf0a2a320b7fbcc8eb2
- SHA1 c3aa3646877d4cbf4866e21b0b8714a32024118c
- SHA512 9ad3f3c0794caa6352dfa68638d48d176255bbf11760cccb5dc3d6088a04547b33acb85aaa0ff8a61f33704414b9cb87ea7670964a3be99251796dd5779082e3
- TLSH
  T16CC02B7CC1380F0BC44F58D06BDE0E412B81B42201BC0BB47A6F29559C0859106DBCDF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  Farrago 2.1.5/Open Gatekeeper friendly:rsrc
- Size 419KB
- SHA256 4dd4e4e755cb3f40250c3beca9392bc5f6dc0c2ebdf77ffcafc2a20f12f4299d
- MD5 4db75a23fefe94e86abcaa5bdc667cb4
- SHA1 4512e7ae3d1aef9fbf163b3c5bcf312aecbd99d2
- SHA512 a7dee1590512bd69d7b261e087860e4bb640be3dcd525fdb769483a2401b89be98cfd102bbda9571090ea64a9f634a57d188413a6aca414e5388962c1900006a
- SSDEEP 12288:6SvvnqAC077fw5NlLC72sKsOzQVCJoMe+:7f7olG00VCJos
- TLSH
  T16494230B71190839F5D5D235E5B50D764BEF8C63A763C407F2B0BAA02ABEA161C6E513
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31