04fdf6f2fd7245d56073ee2aa41f451dced73b329d62764f9d66b4bcbddb1f6e | Triage™

Login
Reports

Overview

overview

5

Static

static

1

WinDiskWri...on.zip

macos-10.15-amd64

5

Sharing

Copy URL Twitter E-mail

General

Target
WinDiskWriter.v1.3_Tahoe_26.0+.Apple_Silicon.zip
Size 715KB
Sample260916-ryhd8swt7q
SHA256 04fdf6f2fd7245d56073ee2aa41f451dced73b329d62764f9d66b4bcbddb1f6e
MD5 cf5b0963da7b6aed649dea22e28f86c4
SHA1 7ccd6f6373e9b574f8bcf23b9286abefe07d2b8e
SHA512 949bc2c46b2676cb72452950f3a98e0a818ba2e62bd3d220d6e5c3c30f18aa90d73509495f6d82546ec0d0b630acdbc7cabce35bb13f12dbaa8d9adb382ec95a
SSDEEP 12288:t7iRjxbqL92Vvhx3AH72+mAaSUAIitUXkTpv0WeO+0szv8EXfSu4V:kRjxbqLq67iAa99iOkTpcqsDElV
TLSH
T187F4331025CD201FD6EFA6374351B6084E23DF90D9ED4654FDBC286C9A7B24EEA0B8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion execution macos persistence

Static task

static1

Behavioral task

behavioral1

Sample

WinDiskWriter.v1.3_Tahoe_26.0+.Apple_Silicon.zip

Resource

macos-20260915-en

macos-10.15-amd64

3 signatures

150 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  WinDiskWriter.v1.3_Tahoe_26.0+.Apple_Silicon.zip
- Size 715KB
- SHA256 04fdf6f2fd7245d56073ee2aa41f451dced73b329d62764f9d66b4bcbddb1f6e
- MD5 cf5b0963da7b6aed649dea22e28f86c4
- SHA1 7ccd6f6373e9b574f8bcf23b9286abefe07d2b8e
- SHA512 949bc2c46b2676cb72452950f3a98e0a818ba2e62bd3d220d6e5c3c30f18aa90d73509495f6d82546ec0d0b630acdbc7cabce35bb13f12dbaa8d9adb382ec95a
- SSDEEP 12288:t7iRjxbqL92Vvhx3AH72+mAaSUAIitUXkTpv0WeO+0szv8EXfSu4V:kRjxbqLq67iAa99iOkTpcqsDElV
- TLSH
  T187F4331025CD201FD6EFA6374351B6084E23DF90D9ED4654FDBC286C9A7B24EEA0B8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy