Overview

overview

8

Static

static

3

SKlauncher-3.2.18.dmg

macos-10.15-amd64

8

SKlauncher...562.gz

macos-10.15-amd64

1

0000000040b75562

macos-10.15-amd64

1

SKlauncher...563.gz

macos-10.15-amd64

1

0000000040b75563

macos-10.15-amd64

4

SKlauncher...d-uuid

macos-10.15-amd64

1

SKlauncher...curity

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...fo.xml

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...er.jar

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...onStub

macos-10.15-amd64

4

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...kgInfo

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...n.icns

macos-10.15-amd64

4

SKlauncher...enance

macos-10.15-amd64

4

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

SKlauncher...enance

macos-10.15-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    SKlauncher-3.2.18.dmg
  • Size 1.4MB
  • Sample260826-m5hlcsvsaz
  • SHA256 65d0c8a5ba00ae164aa68f7ad6c4aa305c46e1b0236fb3e2790bc8bd970f200f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverymacos

Malware Config

Targets

    • Target
      SKlauncher-3.2.18.dmg
    • Size 1.4MB
    • SHA256 65d0c8a5ba00ae164aa68f7ad6c4aa305c46e1b0236fb3e2790bc8bd970f200f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscovery

    • Path Permission

      Adversaries may modify directory permissions/attributes to evade access control lists (ACLs) and access protected files.

      defense_evasion

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

      defense_evasion

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

      defense_evasion
    behavioral1
    • Target
      SKlauncher/.fseventsd/0000000040b75562
    • Size 71B
    • SHA256 d133f424aa980d0a9c485220245ea724638dda5e61331820b3f61b1f82094415
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral2
    • Target
      0000000040b75562
    • Size 74B
    • SHA256 886f75529a16ff0d4afca9cc1dab6566a5806b72cf1f3abca4dc6c22c6a453a4
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3
    • Target
      SKlauncher/.fseventsd/0000000040b75563
    • Size 72B
    • SHA256 6f80f09027d7fd651dbd0ee4f611b1f52020d980cb1044443b126738f70d1522
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral4
    • Target
      0000000040b75563
    • Size 58B
    • SHA256 dd68ac47af59e6f46df09c9be2ea3baf1f6c5030f7e2ba1e56f31999f6548ceb
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    defense_evasion
    behavioral5
    • Target
      SKlauncher/.fseventsd/fseventsd-uuid
    • Size 36B
    • SHA256 3434ec429aa2f66a3287047b2c056a5b9a80ff1c8a9dc0af604ed7657a39f343
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral6
    • Target
      SKlauncher/.fseventsd:com.apple.system.Security
    • Size 68B
    • SHA256 30600f0a3bd7be96493b3b366230f8bf4beb13c17d1514923c397d1c35fbefb1
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7
    • Target
      SKlauncher/Applications:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral8
    • Target
      SKlauncher/SKlauncher.app/Contents/Info.plist
    • Size 1KB
    • SHA256 6d6ca019bf5e51bd3b1022887467384edbc9741fa682a6592283cde8c6b7c929
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral9
    • Target
      SKlauncher/SKlauncher.app/Contents/Info.plist:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral10
    • Target
      SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar
    • Size 1.3MB
    • SHA256 25a73e3770a1d8d14bce53e8920e2e893aacc3c715d0fb22f878ef2090d03863
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11
    • Target
      SKlauncher/SKlauncher.app/Contents/Java/SKlauncher.jar:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral12
    • Target
      SKlauncher/SKlauncher.app/Contents/Java:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral13
    • Target
      SKlauncher/SKlauncher.app/Contents/MacOS/universalJavaApplicationStub
    • Size 37KB
    • SHA256 089af732e9202ec25f645ea2ac89fb8c82881551f0762478edbe05b188c8ffea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral14
    • Target
      SKlauncher/SKlauncher.app/Contents/MacOS/universalJavaApplicationStub:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral15
    • Target
      SKlauncher/SKlauncher.app/Contents/MacOS:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral16
    • Target
      SKlauncher/SKlauncher.app/Contents/PkgInfo
    • Size 9B
    • SHA256 7e50a30efad50208a173203ced60818d693bb61266b75aa10927d1a2adce80cb
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral17
    • Target
      SKlauncher/SKlauncher.app/Contents/PkgInfo:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral18
    • Target
      SKlauncher/SKlauncher.app/Contents/Resources/icon.icns
    • Size 199KB
    • SHA256 126e83bb8b2e90c376ff5af9211b52e32fd90461fad674f8da90bbdf3259990c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    defense_evasion
    behavioral19
    • Target
      SKlauncher/SKlauncher.app/Contents/Resources/icon.icns:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    4/10
    defense_evasion
    behavioral20
    • Target
      SKlauncher/SKlauncher.app/Contents/Resources:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral21
    • Target
      SKlauncher/SKlauncher.app/Contents:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral22
    • Target
      SKlauncher/SKlauncher.app:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral23
    • Target
      SKlauncher:com.apple.provenance
    • Size 11B
    • SHA256 936a8f11f692fe33fa2e6e7c5b92039965f6518dfe75342618d0ab6dd47740bf
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral24

MITRE ATT&CK Enterprise v16

Tasks