General
- Target virus.txt
- Size 1KB
- Sample260818-266f5sap7v
- SHA256 d2f0c86fb5e2f24830ed6958712dd07f76748d75990a7ddea65a3ea2ca8d7481
Malware Config
Targets
-
- Target virus.txt
- Size 1KB
- SHA256 d2f0c86fb5e2f24830ed6958712dd07f76748d75990a7ddea65a3ea2ca8d7481
Score8/10-
Prompts the user for their password using a hidden input dialog
Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.
-
Exfiltration Over Alternative Protocol
Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
-
File Permission
Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.
-
System Checks
Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
-
Launch Agent
Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2AppleScript
1Unix Shell
1System Services
1Launchctl
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Hide Artifacts
1Resource Forking
1Virtualization/Sandbox Evasion
1System Checks
1Discovery
File and Directory Discovery
1Virtualization/Sandbox Evasion
1System Checks
1