Overview

overview

8

Static

static

1

init_stage.sh

macos-10.15-amd64

8

Resubmissions

07/08/2026, 02:44

260807-c8lr3sy1cv

07/08/2026, 02:38

260807-c45pdseq3s8

Sharing

Copy URL Twitter E-mail

General

  • Target
    init_stage.sh
  • Size 171B
  • Sample260807-c45pdseq3s
  • SHA256 e497023a7bc7e334d1f457d32761407df71bdc15c4be46a7927c0c0271112cc1
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasionexecutionmacos

Malware Config

Targets

    • Target
      init_stage.sh
    • Size 171B
    • SHA256 e497023a7bc7e334d1f457d32761407df71bdc15c4be46a7927c0c0271112cc1
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasionexecution

    • Identifies memory size as anti-VM

    • File Permission

      Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.

      defense_evasion

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks