General
- Target crimsonland_ruRU_1_4_1_44647.pkg
- Size 131.6MB
- Sample260808-cze8yaycnf
- SHA256 982f5b1332fa6ee54631925e0b7347604024c089a8719b9e2d8b4dda746ec8f8
- MD5 37987b8c4f5cbb41515e48af2677c740
- SHA1 eb283bedbc0fe62e3c45d66936c9a4a1ef0b4909
- SHA512 cf1bc3bf8df6cd5645166c4b7f2749d37d37bc7fd7b2d41ea48ca3cfe45c9b23d72f0afa6f58b3053bf3efb0e1f405d28920c82314965ca7dc871041dc6779d5
- SSDEEP 3145728:svP4Qq37fOnbpxlFTPQNutjTw+w8CE6N7nV8nAzEO5nFV:cPw37fqVXRPQNutfrwNRNRzz1/
- TLSH T154683381EFEDC035C57F116516B4FC00E2F242679BAABD140858D3EE383971F8A95B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
crimsonland_ruRU_1_4_1_44647.pkg
Resource
macos-20250619-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target crimsonland_ruRU_1_4_1_44647.pkg
- Size 131.6MB
- SHA256 982f5b1332fa6ee54631925e0b7347604024c089a8719b9e2d8b4dda746ec8f8
- MD5 37987b8c4f5cbb41515e48af2677c740
- SHA1 eb283bedbc0fe62e3c45d66936c9a4a1ef0b4909
- SHA512 cf1bc3bf8df6cd5645166c4b7f2749d37d37bc7fd7b2d41ea48ca3cfe45c9b23d72f0afa6f58b3053bf3efb0e1f405d28920c82314965ca7dc871041dc6779d5
- SSDEEP 3145728:svP4Qq37fOnbpxlFTPQNutjTw+w8CE6N7nV8nAzEO5nFV:cPw37fqVXRPQNutfrwNRNRzz1/
- TLSH T154683381EFEDC035C57F116516B4FC00E2F242679BAABD140858D3EE383971F8A95B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes a macOS installer package script
Adversaries use OS-specific installer packages and their resources to trigger the execution of malicious content, establishing persistence and elevating system privileges.