General
- Target Setup.pkg
- Size 95.9MB
- Sample260907-rm8gaaycjd
- SHA256 b16eea517a3b0b511894accf22b021e9d35ece1740f8439e1fc8a1058133c64e
- MD5 7dea33086d98679a70d5980b1643f40f
- SHA1 78118a66760564dde4527f1838dfb138b01f7ae8
- SHA512 1c32f1af7f60973510d5898ec628a521c91126b980f47cb560da3b0761c993ffd2d6d58354ff6bddf9761b9ce58e96ae25ad198eda5b474cccfab07157b0b1d7
- SSDEEP 1572864:omp0e9+LuNLlTtUCinhb1/mgKtE1Jp7ojRwP9HY5NcxS94YwOBfgvTTCL+LZ0OUf:lpqCdECihRmftgIjRWHY5Ncx440Ngv/a
- TLSH T1122833A592B0CEA6DE01313DA571722AB9F45AD8B98E9F0ED0E5C9C5C14430B8B5FC4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Setup.pkg
Resource
macos-20250619-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.pkg
- Size 95.9MB
- SHA256 b16eea517a3b0b511894accf22b021e9d35ece1740f8439e1fc8a1058133c64e
- MD5 7dea33086d98679a70d5980b1643f40f
- SHA1 78118a66760564dde4527f1838dfb138b01f7ae8
- SHA512 1c32f1af7f60973510d5898ec628a521c91126b980f47cb560da3b0761c993ffd2d6d58354ff6bddf9761b9ce58e96ae25ad198eda5b474cccfab07157b0b1d7
- SSDEEP 1572864:omp0e9+LuNLlTtUCinhb1/mgKtE1Jp7ojRwP9HY5NcxS94YwOBfgvTTCL+LZ0OUf:lpqCdECihRmftgIjRWHY5Ncx440Ngv/a
- TLSH T1122833A592B0CEA6DE01313DA571722AB9F45AD8B98E9F0ED0E5C9C5C14430B8B5FC4F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes a macOS installer package script
Adversaries use OS-specific installer packages and their resources to trigger the execution of malicious content, establishing persistence and elevating system privileges.
-
File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.