664ef47db9945c94db09faecc092036984dcaeec67db5f3b6e61297679cc2036

Sharing

Copy URL Twitter E-mail

General

Target
devmarker.dmg
Size 7.8MB
Sample260825-gyzy6seq2v
SHA256 664ef47db9945c94db09faecc092036984dcaeec67db5f3b6e61297679cc2036
MD5 70e2cf00f3880940c9a76415ddeb6630
SHA1 3a2d42a9f576ab5e2b028af9756bc5b68c6e636b
SHA512 38671bd28361a96489505846442f977ba7e8115f1c24d0855fe2605686ed0603d75fe1cd1418a20a13581632dfaf978c988133801038f5237dff54e11317dc22
SSDEEP 196608:YfUzkaocjtxUOOQSOh+K8VUns4Lkwsjum4/2VxI1yVwikRAT7/v5:4Ika3/UOrN+6sJwZOV21yuPRw7v5
TLSH
T11D86337A2EBD5ECCDF909ABB41525602CFCDD253E81B17D6AA10148D2FDC4CD7E2812A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  devmarker.dmg
- Size 7.8MB
- SHA256 664ef47db9945c94db09faecc092036984dcaeec67db5f3b6e61297679cc2036
- MD5 70e2cf00f3880940c9a76415ddeb6630
- SHA1 3a2d42a9f576ab5e2b028af9756bc5b68c6e636b
- SHA512 38671bd28361a96489505846442f977ba7e8115f1c24d0855fe2605686ed0603d75fe1cd1418a20a13581632dfaf978c988133801038f5237dff54e11317dc22
- SSDEEP 196608:YfUzkaocjtxUOOQSOh+K8VUns4Lkwsjum4/2VxI1yVwikRAT7/v5:4Ika3/UOrN+6sJwZOV21yuPRw7v5
- TLSH
  T11D86337A2EBD5ECCDF909ABB41525602CFCDD253E81B17D6AA10148D2FDC4CD7E2812A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  InstallExt/Install Extension.app/Contents/MacOS/devmarker
- Size 6.0MB
- SHA256 c5b6f8bc2689e5ef56f444943ff479fb427c9a03da5648bfb2e4e72aff106706
- MD5 01d093155d48b3fe55cd7a969aa38cbf
- SHA1 8fb887d6ef19aada351a3d170155b697dcca1001
- SHA512 7b9f1785f706c1812b6d5d6809c0dbe7efd391d60d8663bc36ef041914ebc1b2f3a36f76a49fd4a5c2194a3d61a17f8f13305f121a038bf085900dd637f15c7a
- SSDEEP 98304:OW34nY5LIF3cti0il+jyNJ/lZUZ33jh5hd13kO:Oi5e+eTf/lZCj5j
- TLSH
  T1CC566A07FC6DA8A2C5DAA2354A6653957B34BC082F1193D73A14B77C2EB27D08F36364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  InstallExt/Install Extension.app/Contents/Resources/devmarker
- Size 6.0MB
- SHA256 c5b6f8bc2689e5ef56f444943ff479fb427c9a03da5648bfb2e4e72aff106706
- MD5 01d093155d48b3fe55cd7a969aa38cbf
- SHA1 8fb887d6ef19aada351a3d170155b697dcca1001
- SHA512 7b9f1785f706c1812b6d5d6809c0dbe7efd391d60d8663bc36ef041914ebc1b2f3a36f76a49fd4a5c2194a3d61a17f8f13305f121a038bf085900dd637f15c7a
- SSDEEP 98304:OW34nY5LIF3cti0il+jyNJ/lZUZ33jh5hd13kO:Oi5e+eTf/lZCj5j
- TLSH
  T1CC566A07FC6DA8A2C5DAA2354A6653957B34BC082F1193D73A14B77C2EB27D08F36364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral3
- Target
  InstallExt/devmarker_macos_universal
- Size 6.0MB
- SHA256 c5b6f8bc2689e5ef56f444943ff479fb427c9a03da5648bfb2e4e72aff106706
- MD5 01d093155d48b3fe55cd7a969aa38cbf
- SHA1 8fb887d6ef19aada351a3d170155b697dcca1001
- SHA512 7b9f1785f706c1812b6d5d6809c0dbe7efd391d60d8663bc36ef041914ebc1b2f3a36f76a49fd4a5c2194a3d61a17f8f13305f121a038bf085900dd637f15c7a
- SSDEEP 98304:OW34nY5LIF3cti0il+jyNJ/lZUZ33jh5hd13kO:Oi5e+eTf/lZCj5j
- TLSH
  T1CC566A07FC6DA8A2C5DAA2354A6653957B34BC082F1193D73A14B77C2EB27D08F36364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Queries the hardware information (I/O Kit registry).
  An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
  discovery
behavioral4
- Target
  InstallExt/install.sh
- Size 435B
- SHA256 a330a466e830d437c13f1ee86e94621a1b47a22f5dfcdf5e5c219b64d06c39d7
- MD5 afff33ccb7e91195a7519d59560fafbb
- SHA1 60893018814a085c56f9a1f699c38b10d82c768a
- SHA512 a1a54b90dd0cf262193386008974a948304316bd087e9a45cd41f95e1647c1253f2b4a73eb5c3f7a4c0f13ce19e8d0195a961e0c034181fc25fac39400bf3f4e
- TLSH
  T1E1E0EC80E4EC51B1721C431DFE553E901B9DE5BF2FA53945A9A58820512D24974CB396
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion discovery
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
behavioral5 behavioral6 behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Queries the hardware information (I/O Kit registry).

File and Directory Permissions Modification

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8