General
- Target payload.bin
- Size 19KB
- Sample260818-c7e8xavyes
- SHA256 8fdcc1a5f08bd6850fee9963e8a19ca8a53c63ef1efa668accd54c60acc70f4b
- MD5 64e300019465490c3e859c8d78d162e9
- SHA1 f5be2ef0f0f1193b4bb8dda7af140f522db0a58f
- SHA512 0d1b980bdc9089e7c30d64b365b66fb017858809e6383b62f2d8ecb0f9ef2500d7b22e0dfce469bb363dfb54543d3943da104a053d8f7e66bf19f2da2b439564
- SSDEEP 192:8LcK1YU8YRt9vg2u3AJtX4U+pRO4In0HpbyT:fUj2UX4U+pRO6S
- TLSH T1CB9275ED5FB0FAD55A15151F28F20D443A00C07BA3AD06BFE98F72260E5E93C6E5D826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
payload.bin
Resource
macos-20250619-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target payload.bin
- Size 19KB
- SHA256 8fdcc1a5f08bd6850fee9963e8a19ca8a53c63ef1efa668accd54c60acc70f4b
- MD5 64e300019465490c3e859c8d78d162e9
- SHA1 f5be2ef0f0f1193b4bb8dda7af140f522db0a58f
- SHA512 0d1b980bdc9089e7c30d64b365b66fb017858809e6383b62f2d8ecb0f9ef2500d7b22e0dfce469bb363dfb54543d3943da104a053d8f7e66bf19f2da2b439564
- SSDEEP 192:8LcK1YU8YRt9vg2u3AJtX4U+pRO4In0HpbyT:fUj2UX4U+pRO6S
- TLSH T1CB9275ED5FB0FAD55A15151F28F20D443A00C07BA3AD06BFE98F72260E5E93C6E5D826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Identifies devices as anti-VM
-
Queries the hardware information (I/O Kit registry).
An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
-
Launch Agent
Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.