Overview

overview

8

Static

static

1

testtt

macos-10.15-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    testtt
  • Size 63.3MB
  • Sample260807-bk2b7adr3z
  • SHA256 588a24fce9acbdf112477dbcd924a685cd418312b7a638197baa1b8aab63184a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionmacospersistenceprivilege_escalation

Malware Config

Targets

    • Target
      testtt
    • Size 63.3MB
    • SHA256 588a24fce9acbdf112477dbcd924a685cd418312b7a638197baa1b8aab63184a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

    • Identifies memory size as anti-VM

    • Identifies physical CPU count as anti-VM

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Login Items

      Adversaries may add login items to execute upon user login to gain persistence or escalate privileges. Login items are applications, documents, folders, or server connections that are automatically launched when a user logs in.

      persistenceprivilege_escalation

    • Queries the macOS version information.

      An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks