3d2847d591a4918c94fde042c2a31227908643a09d50d809ffa4328888974d44

Sharing

Copy URL Twitter E-mail

General

Target
AnterSurf-27.0.0.dmg
Size 121.4MB
Sample260821-p4nr4abe62
SHA256 3d2847d591a4918c94fde042c2a31227908643a09d50d809ffa4328888974d44
MD5 279a9ea67c3d29e3723da5641bc7b081
SHA1 c9478e7d0712ce98f8dc36e147fe6f0b755ba96b
SHA512 a88d89d71ef9ce6823b96a6740f481ad13669d251082daf3d08060e592aa5d4bdaec86ce141d5cd042d3401ebfe39dc0c9be769913f98e9f9957411323ed60c4
SSDEEP 3145728:r+1JSvq4q6F8HqAaLGOoYqcC+krXdrY9lrt6+suzUx/eiE6jy32/lG:r+EIHhaLGOoYqc6rNeNgumer6jQz
TLSH
T14758337190F10DA7EEABAC398444406E8C4EBA733271F2B28B5D824215B474E67FD17E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

defense_evasion macos

Malware Config

Targets

- Target
  AnterSurf-27.0.0.dmg
- Size 121.4MB
- SHA256 3d2847d591a4918c94fde042c2a31227908643a09d50d809ffa4328888974d44
- MD5 279a9ea67c3d29e3723da5641bc7b081
- SHA1 c9478e7d0712ce98f8dc36e147fe6f0b755ba96b
- SHA512 a88d89d71ef9ce6823b96a6740f481ad13669d251082daf3d08060e592aa5d4bdaec86ce141d5cd042d3401ebfe39dc0c9be769913f98e9f9957411323ed60c4
- SSDEEP 3145728:r+1JSvq4q6F8HqAaLGOoYqcC+krXdrY9lrt6+suzUx/eiE6jy32/lG:r+EIHhaLGOoYqc6rNeNgumer6jQz
- TLSH
  T14758337190F10DA7EEABAC398444406E8C4EBA733271F2B28B5D824215B474E67FD17E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral1
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/MacOS/AnterSurf
- Size 33KB
- SHA256 997d6e26011b89344f98626987155158f13f492148f79bc00f24d841ae693b60
- MD5 a7428a18a695fae20d9c1618c7db4ce8
- SHA1 1fc25fbc78f68d563d355d08751d003232639441
- SHA512 51c66521934a07e95e00455725a0133f491342610036a4f33cd60635bafe75008aa9b4e5486a14ab25fab73af78be5deddf1f0dbaee8a627cbd614ee53957a33
- SSDEEP 48:JqOt+0qgwIicIesAxjAl8CBThBYoQARWqUedgPyk:/ZwIiospTThuofpdS
- TLSH
  T1C3E21225BF480462E08CD639C1EA0F4627B7E57143EA5A571762E03CFFD63959C0092B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs
- Size 1KB
- SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
- MD5 cdea38e7d795ce6e8274bef89c773780
- SHA1 7bf89bfcaac6964e4f551233f0daea7dc2f58930
- SHA512 401068503e0cefa4bae0c524bafd903f83ce945170a5a28fa5b8f3004c9b1afd09db188e416a071011276c836a6a2dd75ca5d9397e7d24cd1715b6c46e1b71e9
- TLSH
  T1F941873006FEA06E422340B73BFFD45B59B5983B1145DE69F99CC5C24FC0191199AEFA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral3
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/index.js
- Size 13KB
- SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
- MD5 ff2e30ea41c50e397cc5fb516d633d2b
- SHA1 bfa32375a230e4c6b37d9dee9a94bd106af80bdf
- SHA512 bbaa0d96fa3b546fe913d0988dbac54c8d963b4a79f8459c22cf27920e754977f471ccecc07bf9936bd34a3b65dfc6517ae5e126dc260d68347f71f3106bb51f
- SSDEEP 192:4aBgo4Ls4gCGlqmPk4TPGwsVh6rLSvR50qjXryXN6gLo0OuLoC6lVlfuswTDo+Wo:eokBL4LSA6e6z9qrotsRdn
- TLSH
  T14652FF496DFB31624673B1754F9F9A0DB23DD017142CCE94B98C83E0AF905389AA6F64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral4
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh
- Size 138B
- SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
- MD5 cd2e20d9a8384d3090058e3428d6b327
- SHA1 b3f90405a89eeb07ff6fc4243be8016ce2d6e1c3
- SHA512 d39514e34aea97b3b03b966b76affc5fbb740799bf15219935d8995029a1fbeefb59d3a2a356ede3cbfce69ed0d775680dbff33493d2585a7ab29b84cbb70527
- TLSH
  T143C02BC1C07B00225B47021911463000CB148AE51A178A56C0C4C2E8C7251D9A61790D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral5
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
- Size 733B
- SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
- MD5 e886188759f08df991ad8af4bbc333c1
- SHA1 b9644330527cb91fc20e2d66a93c8380f71932ff
- SHA512 b4b30187505941eb75d44bdb51d4bc9ee778034d0850c7253a38ca636a620c9c6ae8954e43515b57ef409adcb6a91976e4e92f49b466c6c38e7bd33a79340ce8
- TLSH
  T1CD019C17E456365B2E2CC6A273EE6893EA05AEC26F2C551FA0803A7873BF5075610C86
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion
behavioral6
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/electron.napi.node
- Size 421KB
- SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
- MD5 5a8ff3c35b7d2d367d4b56f016650860
- SHA1 43f00704db624630f2164d52e47e93d4430b764a
- SHA512 753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721
- SSDEEP 6144:MZMB4WEWGxBL/aJrxffqWCMFe4FQvYOBoSj9uf1iEENkC:MZeE9BMV3e4EtiG9uf1ik
- TLSH
  T1DD94F839E261D17DD04B947099DB4A0310B4B5F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral7
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/node.napi.node
- Size 421KB
- SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
- MD5 c5ac962f6ef85085075bf5e761696f56
- SHA1 0574d6d3914d86027d35c5a4bcd36c9f23f426fb
- SHA512 64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072
- SSDEEP 6144:oB4oEWvydo2tHAufixrHJMv3XlhYOkoNr1iEEN56:cEKydog3TtD91i5
- TLSH
  T11B94F839E261D17DD04B947099DB4A4310B4B1F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral8
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/electron.napi.node
- Size 421KB
- SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
- MD5 5a8ff3c35b7d2d367d4b56f016650860
- SHA1 43f00704db624630f2164d52e47e93d4430b764a
- SHA512 753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721
- SSDEEP 6144:MZMB4WEWGxBL/aJrxffqWCMFe4FQvYOBoSj9uf1iEENkC:MZeE9BMV3e4EtiG9uf1ik
- TLSH
  T1DD94F839E261D17DD04B947099DB4A0310B4B5F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral9
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/node.napi.node
- Size 421KB
- SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
- MD5 c5ac962f6ef85085075bf5e761696f56
- SHA1 0574d6d3914d86027d35c5a4bcd36c9f23f426fb
- SHA512 64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072
- SSDEEP 6144:oB4oEWvydo2tHAufixrHJMv3XlhYOkoNr1iEEN56:cEKydog3TtD91i5
- TLSH
  T11B94F839E261D17DD04B947099DB4A4310B4B1F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral10
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.node
- Size 619KB
- SHA256 e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095
- MD5 8e7adb376ff87a10990f783562b06a4b
- SHA1 924bcdf667dcb58767efc662068ffaea2f40e7f3
- SHA512 6a18f6f71a55eacdd4dd415e3a39ff2fd551594d332921e5e68d717142ec75595a32dab7d40aa82b33dc33c27661e7382d622dea4173a1deb88fcfc976621e23
- SSDEEP 6144:GaiFHaev+gFh4N7UUBSgaAng6PM+FMi83y9OMZMduqpLLDg3KF8:riF6xgAN4Fgbg6PMWM9uqp1F8
- TLSH
  T1F8D48E207894C2B2FDEA20FA01ECB637029DD4B0075496C756E81BFED6606C2BB37657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral11
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/node.napi.node
- Size 619KB
- SHA256 ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5
- MD5 3a706e64b17cc01d142794436c95805a
- SHA1 f1bb6751517c517681bab11e5c47a9a141e659c7
- SHA512 f839493cf238c735b7937d361bf08cdc2ef3381ac88accc759096baf0c6063660ac9771d18de8c3af94b5b8abbb1fa079bd60824ec48996946fdbac6f5f92ac3
- SSDEEP 6144:ZFjUvSYDEMcss+lN7UUa65u/XW4QxAiBbsp6qE+pKHVQiWuqpvKg3Kg:ZpUvfEMfN485eW445bsp6qhuqpmg
- TLSH
  T1D7D47D207884C2B2FDEA20FA16ACB677029DD4B0075496C756E80BFED6606C27B37757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral12
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/electron.napi.node
- Size 797KB
- SHA256 5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e
- MD5 b872a2c94ff78af34eb7c14c71f7a784
- SHA1 e8016fafa0a91176d56664d9218abbc286707411
- SHA512 df93b9c2e8b118d3e01da7dd63af83e4bf0c36d835ee49167aa49b3a9459b6f21b0802feeb6ed52d7eefc0c1270128a7748487ead1bee82f2039745599a80262
- SSDEEP 12288:BiHbpT41iFWTMg60IHCEqooN/vnbCzkEHN3YbmMxBIfOPB1zjetJR:Mu1i+MgPlrfetJ
- TLSH
  T1CE057D666BA816A1D0B7D13E89D78F56EAB1F804433467CB01D0459D2F13BF89A3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral13
- Target
  AnterSurf 27.0.0-arm64/AnterSurf.app/Contents/Resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/node.napi.node
- Size 796KB
- SHA256 c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f
- MD5 218fc90e5725a6a7ddfdd1edb760c12a
- SHA1 2fd9c618e6105a81c1f812d55f405a947b61fe3b
- SHA512 7d6d0cef3b33a092d9a8f37e2fa2f3ec44b843f4bc0d3415d832f3c183318cdfa3d05590d94c552a1ef322de2d67bcb24864c65f4fe43293891755b94bd8062a
- SSDEEP 12288:7vWhpNRexpxqf8qFl9CfrumyKlAsppNDInGPpbn+JY2ef5HDek7hEDi:LKRexefIek7hE
- TLSH
  T16F057D662BA812A1D4B7D13DC9978F56EAB1F8144730A7CB01D0459D2F13BF89A3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14