1b83bf082d875448e981c41e649661772c5a58cd29736c4a827ab7497e65532e

Sharing

Copy URL Twitter E-mail

General

Target
Mp3tag 1.13.3 [EDiSO].dmg
Size 13.8MB
Sample260811-ezecrawbjg
SHA256 1b83bf082d875448e981c41e649661772c5a58cd29736c4a827ab7497e65532e
MD5 f9d3703695a118d91ce5ee21cf42c963
SHA1 16f90d24053dfcc5cbae9face5e9f34c4c3a540c
SHA512 3e01609de99756797eba759729752e63930171945c97545fd0a3184f11d3dead832bb72b1f137e51f13c457e6e933d30ee64be62089b13e54e8a6f704e5ff65e
SSDEEP 393216:yb1PH9z4/s57xmn3HhIaTarG5C1Hr+nPC4lSJDjNk9IhZ0:udz4/sdxG3BzTarpCnflSJDW9n
TLSH
T11EE633B2BF543D08EE20AB7997DE1B1CED252C9F3469DDF6308D2C2A8133554871962A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Mp3tag 1.13.3 [EDiSO].dmg
- Size 13.8MB
- SHA256 1b83bf082d875448e981c41e649661772c5a58cd29736c4a827ab7497e65532e
- MD5 f9d3703695a118d91ce5ee21cf42c963
- SHA1 16f90d24053dfcc5cbae9face5e9f34c4c3a540c
- SHA512 3e01609de99756797eba759729752e63930171945c97545fd0a3184f11d3dead832bb72b1f137e51f13c457e6e933d30ee64be62089b13e54e8a6f704e5ff65e
- SSDEEP 393216:yb1PH9z4/s57xmn3HhIaTarG5C1Hr+nPC4lSJDjNk9IhZ0:udz4/sdxG3BzTarpCnflSJDW9n
- TLSH
  T11EE633B2BF543D08EE20AB7997DE1B1CED252C9F3469DDF6308D2C2A8133554871962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral1
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libMp3tag.dylib
- Size 132KB
- SHA256 b338c167c57ce17b4fb9f8bb7bba6ea653a1e1805ac693b0d97d6ee9a0a4da90
- MD5 0aa43874f814c5e1718909d46665d886
- SHA1 f6feffd5fe5ee944dd6c3d91da265d83b9be5199
- SHA512 2b28f225aa7ae8513967e02bb525680765a49111f101be3141d68bdd6de43fee7869675d3011919cc79d4aafbe17a71d9540b830e1a629ab737e3f1a65d5beb2
- SSDEEP 384:xGJOdXvxDHEBv1En+DryUqqWk3JRw1IByDcrd7pJ4qrh:xrVvxDHEB9En+qNqWk5RXByDcrdPv
- TLSH
  T140D33A823F9C8A43DC9C81B8D9DF4A122131F5D14F561B0B2B50E2BCDFA27EA7964917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftAppKit.dylib
- Size 217KB
- SHA256 02d76c87b73f6cc2521fc2429fe339454e0da4ccbfb88739f19186416a849036
- MD5 61c4d67525ae4ffecd864a5ac1582048
- SHA1 4fe39920b4ee72493d57a9b7fe12bcef6f299296
- SHA512 10f6ed022939acc1b386c87fb71adda68fd8d39981fa2c40b33f2ed6cfd59208a5adb6f69547eb1edd45f75c4617eaa3e72a2ce5ab3d95472529411027977237
- SSDEEP 3072:N2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNrm:woFP6r0vpGT8Ma0U/c
- TLSH
  T17D244C5723715E3BD66BE039CB6FD9080B24F6429A2613AEC7A45531FEA57221B13C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftCore.dylib
- Size 6.2MB
- SHA256 4029edbe7428e8a3fa096b8fde40aa8bed7877a6e187307e6549cf29b693a2c4
- MD5 ba20d67bdb0b47f364eb2c862bf8a8c8
- SHA1 2bc940701f6ad8b29348ddedf2e4f053335bf0bc
- SHA512 65ee34b36e67402e520378fd770ff05cb571b8dd433d2d3a5a55cb78f46633244ddc492124d74a0c7cf75d163c12f5d09bf57b475894c6d8ade3dcdcb286e9e2
- SSDEEP 98304:DgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:yolt7iI61wgwAm7Ag
- TLSH
  T13C567C3F65A29D0DC2ADD070498F7A022871F4B157563DA417C4BA3A6FBAC91270EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftCoreData.dylib
- Size 96KB
- SHA256 ea37576c800a85414e0baf0c1dc83acafd8145644c09a0cd3cd01ed7bd7d5d0d
- MD5 a0378596eb9dda30d23abad5758066e2
- SHA1 e0fef2262e20259303f1504f318dd73bc3e3244f
- SHA512 609d18d429c698ab1d541bf121f7d8e0d9955960f4de7ee3971b3ec539108a2660467bfaa870c8012a2c143c305455306e0c4f7b5baebbbeff2c8d2131e133c7
- SSDEEP 3072:7SFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcE:eF1bl
- TLSH
  T1EDA373970BB6343BCA6A123341BBC8326870E90B2FD665F697A14DF0299F664370750F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftCoreFoundation.dylib
- Size 41KB
- SHA256 ce36f1a84ffd478e614195dce217fecdc6a89abb9a07daa482312fa128c2c205
- MD5 ff75edff0ecbb3641626b39c78d746bc
- SHA1 7ae65a3ddb14426f5dfe59b701b35b76445d66a2
- SHA512 74953746ce891da1241b8f2f058be4a1963d64f17ded57a76f720d3b896d55954c37f0c43b65687dcae1256783263ae625f2147a2fc424dca4e901006b9e1148
- SSDEEP 192:Sz5zqfMDWrST6140grNoCN+8P0T93eODH2b7nLpRtFrgfprv75alZ8P09ro9:Sz3343ghoCN+8ZOsLpprgxrNab8er
- TLSH
  T1011308A703597421ED9D957141DE6243EE32B3893F6310AAF06AD1B02B33FB51A4B4ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftCoreGraphics.dylib
- Size 186KB
- SHA256 bcefc0edfff1ebe19b328e40cc50d8f0a8f6663af06c05bb200b163a7f5da36b
- MD5 b0b5211c38cc29bd182891c7f7ca817a
- SHA1 02d727585081dea9571085315052c10650e9efbc
- SHA512 c138d96bba1114d04d54f27bd02ff02fb88c886a25eef8a1b87478583326bfad4a1b87d541a15e6a24539e1da0cb3da47c181d84c7763959e79f01c789a4664c
- SSDEEP 3072:la1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbONg:o1kJvHXD5LDAyp
- TLSH
  T15D14D65BF6622C5CCC6DC8704E9E26513015FDF827A24B5EABF050357966E306E12BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftCoreImage.dylib
- Size 48KB
- SHA256 bc3d31004760faa1e46807bc7d3a934feadc6d1402834a95738bed3e5f1e0981
- MD5 1cf1c5dc6a4c2b8668e67cb673bfc373
- SHA1 45e97a69dd6336ebc8229d4866b71b0e02126e8e
- SHA512 0bd07a89ef7cd5415de39d4d7e4f23f0b2987a8205282409722bfa0f9d7dc9858e196dfc08067782829152c4172123ad2b4dd5bcfb73ee1c5ab916c764377771
- SSDEEP 192:5p8v8WXR3e/kfFdJCoNoCN+8P0T93eODH2bxmkBRN7Frgfprv75alZ8P09rp:5CykddIIoCN+8ZOFkBlrgxrNab8erp
- TLSH
  T14823F69B07687132EC5CA170A6CE6302DE32F3897F6300AAB05681B03E77F79195A5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftDarwin.dylib
- Size 96KB
- SHA256 790766b7296e99eb33cf616e70e091b7293203b9490477852beb02b27d6ba820
- MD5 6a02a252d224b9a7eaf1b2c4b07fa85e
- SHA1 7d227e08aea8e156624f0c53b78c60b2e20e63a9
- SHA512 54055e707c674733099a271a39ee4ff836f0a2ebbe04ad4269c9d1ec9b7f75c8ad2c422ac88d763db074df834acf9769dfa7dec128bac8c5c60cd307ebbe2ee6
- SSDEEP 3072:gcicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIohee:gcs1elxD8DBnVK4rywrcXARZTFW6D5B/
- TLSH
  T1FAA3E69E6E63B827D626D835C8A767918933F5F84F0236195F98F0BE4D32BC0354291E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftDispatch.dylib
- Size 320KB
- SHA256 969db515498d4e372d9e69387a782622076b498121cc5761fb2b3a9b2ba29440
- MD5 b79e8f4cb0359cb1b8db881b1ffe1bbd
- SHA1 e1d65c28c3d9131203fabc3061b4dd05b0d9c0d4
- SHA512 1a00cbcfbc38b2ca2bbe26708757fac43e32c109adcbfa96e12d48edeefeccea11fe2cb7e665b66e13193b3b5ac97caf47cca852f3d2e5023c1a79ec2a0fc955
- SSDEEP 3072:po5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQj880:+5R9iqOEcKbAgHMWbBZ7oS1bW70
- TLSH
  T1D164A5FAD2E24E24C434807883BF79221723F47193712768D764B2A56E7ED546E1FE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftFoundation.dylib
- Size 3.0MB
- SHA256 5b4269067768203b1d77d7ff91ae23e971be54ddd1bda820567a77c63f55668d
- MD5 89800c40a9b4bc6b9cbf2fdce93e6d60
- SHA1 e763c063825d8f0d9bff1dfddcc365dcfda0130a
- SHA512 8c1af97cc79e1be38fb6f7fb13bd588d3429a81061b50a384bb9b4200b6098c952311b4e0416a3fd5efb246d489fbebb7db8641c2549a4dccdf16d94afc838f0
- SSDEEP 49152:rwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:cCd1cNn4p/X0fVYtBGt1GK3
- TLSH
  T1C0E5386B9F33A81CC17F807215BF69502530FB97B8523DFAE3945B741BE9861178A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftIOKit.dylib
- Size 44KB
- SHA256 067988d8c95630972e412be21304596969628d9afb98db7a48eb4d24894bf352
- MD5 171b7371547a531c8be1adac3b86d979
- SHA1 f350103bbcc5bdb7171f9d56e89d708c0cadefcb
- SHA512 dbc8df586cd45d9ce77d219ef0393cc3a565b4a14d603a17ddf17be2c075d063eade2b0007bdd43051eb42c02c1193f9627e2e98ea26e258e7c3ae817e476121
- SSDEEP 192:NXh5X/+68AFA6zfdgfaWWEyggBpQB22HufNoCN+8P0T93eODH2T/1Cw6Frgfprv:NXz+C9exuFoCN+8ZOmurgxrNab8erH
- TLSH
  T1E823B57F1F265232EC14D1B1C48718C12DB6F2185E930081E267F1F2392EB75AA6B66E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftMetal.dylib
- Size 82KB
- SHA256 6a541f40d64195a7ca976fa42c1293ab25a9961958a43f0b76630b82a98a1315
- MD5 d62a56cd42288ce8a562f1f8695d6b40
- SHA1 e7635b30b5083c41bb2145d18de4d033d8f1bc44
- SHA512 6ccf7219e2c2e40142c55918d975a653bf9370b17df86006c9a898ca300a7391c64801f5822e12ac410c55399ab366ead22263dbba6ce517e3278d4c03543b93
- SSDEEP 768:/Lcjr+chkNwxGlsMg/Knbekt+9PPGFP2wiF08ZiAOab8:gjrDkNwxGlsMgybekt+9PWuwlaNOK
- TLSH
  T1B88319972A547421CD6C513641DF2A432931B782BE12566FB3D147E26F33F8A3423AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftObjectiveC.dylib
- Size 60KB
- SHA256 ad9da1316deb837f4eeda9332d80dd0f2e8aa28f1a51c4ad45d607ad5f54bd33
- MD5 9e09eea4ce555b74b60ca8fc93e29040
- SHA1 46de5d79a7ad18f6a7f4e16fc5fe1870eb5c8a29
- SHA512 0add871b09d30df2dc945fed0587f99844646e1ac5a587e6d809502a9ed5623568908e000762fb92111d12a3d628db2e2edf09e321f91037e04ab1a7e84e921b
- SSDEEP 768:ZkOEK3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmEwF08ZpNCfAab8:OtCVmapwfAK
- TLSH
  T17E530A676310B855C999C0B202DEA354C9D1F5C9AB4292DAF3A0C1FD9BDB2703B1678F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftQuartzCore.dylib
- Size 57KB
- SHA256 d7782badaa3df8c1a9132589e2f2fa7f44feaba0affafce57438e6a0b2729c1e
- MD5 9b52fbc5548666ad4b4ddc5579babbb6
- SHA1 f48289c66229e7d0a9bca1b382b598be71ac9dc1
- SHA512 f583bcf74a3c370de7c3c92bb7e3fd0290ec374a869fb9a7e50becb2ecc0c3efee43176c4a8444f6ce03cb75cc842f5444fd1313e00ce815192c18eea9fa1438
- SSDEEP 192:zzkAfXEy/iDgXg8W9bn2jlzS/7SkKrNoCN+8P0T93eODH2TFxFrgfprv75alZ8PS:zzkCXgVboKKhoCN+8ZOCrgxrNab8er
- TLSH
  T1C143195B2B4D7022DC1D927446CA7A52FD31F349BF6B10DAF060A1643E33FB4296399A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftXPC.dylib
- Size 44KB
- SHA256 b150a9ab8d74b147746fedcc9e2ace4a3e1b81d4e12d3511d97df9c7490fbe5c
- MD5 76993327a45bee5c2e300dda3bfe0c89
- SHA1 30ea765eca22dfd38fed35161ae6e02f8557666a
- SHA512 a6f7fc24b8afcba2b509cb80b84eab5af0472cc860f9bfe81fef27788f81c5d4dfb2d8c716f549c1d902afcef112e872af197f59227e28438423e67655bb36ae
- SSDEEP 384:9z5/PHP/L2DC/ToCN+8ZOfeqargxrNab8er:9z9/iGTF08ZIzab8
- TLSH
  T1BD23F85727647822EC9A4036018ED1428DF3B2447FA6019EB1A290B01F77BF6AE5B7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftos.dylib
- Size 70KB
- SHA256 69aa9a598d2be2d9d48bc1ad80a747e54edca43dd6822222e90be55532524f7f
- MD5 af589222a70532cfd48a68ac193e988e
- SHA1 80f05a560342d29d9678627073bfd047588712e6
- SHA512 70fd91e63e961654523c4b475282b9b0d628e32309a14009c2dcf38b45be28a09602c6761c70fc1dd19e30dfc56ea69e3326f7e6d18d9d3687a5dc0a157c5235
- SSDEEP 1536:+EvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwcaORK:+EJHm3
- TLSH
  T126633A6B2A28F424C59C807B064E5763BF72F20E6F051189F3E8A5B17FB2F91151768E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Frameworks/libswiftsimd.dylib
- Size 311KB
- SHA256 abc78fb3b9be76f7ad485ed88cb826b178492fb08fc020bfccd663184cb8a2f5
- MD5 38126cedeaaa35960cb82e419e631b93
- SHA1 90dc5ad3fee7bb58bf75a7a84584a5a78efda8d6
- SHA512 842c621ea110fca8f83d47c1943dc22e7f9610e6329256cfda506fb045cd74cb8cab9b207d22ab65a1b275278083072eb08d1eabbd0dcba9d5e58168af8e2765
- SSDEEP 3072:YB2SD9iFyuHwRHr7MONZ2WZay3KU/V4MsXYt4rl8hzZPDDaWrtlkvXTb5isI:SQwRfMONZ203KbMsXryT7D5RGvjkb
- TLSH
  T12D64C72E1B793E3AD362D431C80F1E1BA631F560077D9D9A53E0347B6A61AA11E43E4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/MacOS/Mp3tag
- Size 8.1MB
- SHA256 9deba2c8d6a441fa953571b5aa18666c2e86e54f2df7b6c2a3e595d5b3ac7c0b
- MD5 7ce7c8b2095b5ba9aacf79e7623a2a40
- SHA1 413b0375bc1bc70e9dd70fe8be40c5da52523b63
- SHA512 4c125cd91e837f0ae59ba3d5feda5c14ae9a9615b5adb5387aaccc2b7b0da495002a59292d8a1f27aff4c68e856bbd00587f396f74d0b8f0d2b185790c0f0448
- SSDEEP 98304:0kqOydOT3i25cO0tNBG5ZPw47NNBH599B1:+a3i25cO00v7BZ9d
- TLSH
  T14A86AE23436D6C28C085F27C0E9F9B716A07F6A45531B29F3D6563396FA2DE4132A336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Resources/Acknowledgements.pdf
- Size 53KB
- SHA256 732ef352383a14857231bfa8d1b5f71a927ec83d8ea309d815683d606f1d18a6
- MD5 7187b7cadd45e86c06e340d63a816b31
- SHA1 1ab9ddf8adc4ff7eb867b623a2643ce01482ba4e
- SHA512 f6467606a64ef84b566ea07c4f03640cc07fc0f9d029fa9dfc9d63ad96f3e4719a4bcc4305d4e5ee1f6534d925776a08ce5d3ba8b747f6e899f93ed97b37c83f
- SSDEEP 1536:ADKclGztCef4gUcQy2Y52ZANpeAKxuLAgk:qpw4gUcZZDneAK/5
- TLSH
  T18D43BF29E5955C3CF492C105AA3E37991BDFF33275D868802D3C0B4AA482D94EB578BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral20
- Target
  Mp3tag 1.13.3 [EDiSO]/Mp3tag.app/Contents/Resources/Assets.car
- Size 3.8MB
- SHA256 3bfe0d1b3694186cc131f9b153b481a7339ab985683cccd265b9b6a9af7ec40d
- MD5 33b3646393140af534d02ba920753800
- SHA1 ed813d798fbdf6a71cd6b2c56d3875db48e9e4f2
- SHA512 0df0b11c952ae4b7370c6eaa7bf1418642f60bcfec11dd7ef170a5c6289857637275f693f09aa774f3352e58a2c46824100080fe572f835111fcad62a9530a4b
- SSDEEP 98304:oT7LS6qrgIGkFKtwfk17g/Kwxfk17g/Kw:oT7u6qLGofUwhUw
- TLSH
  T12F0633056748945EE9415536002BBF019F7EBA3617EF590B42B83B3D7DFBA00AE07BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21