General
- Target jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
- Size 500KB
- Sample260922-m48fdscf88
- SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
- MD5 557210da4efb41803a9fe9282398fcdc
- SHA1 09f70405fd6d652609b99b0b00b42f4f8c1bbdb9
- SHA512 316e72fd5334e663a1b90051b2552f137c352c504df31e3c54e045bb340981e80eea378188778f073766fd70474ea834c3f33f9c3fa409873efabd7c60311e40
- SSDEEP 12288:WXoJfAycbXpNU0bamorfNq4dYU1Uu65dRvwB1na+XyEfrWEN7wr:U9hbjtbrorFq0YUKLaXn3yhE
- TLSH T1DBB4237C993532C6DDB127B9AB5C91325CDA03F725A610F0E0B259BCCCDE705B490A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
Resource
macos-20260915-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
source_folder/AppleApp.app/Contents/MacOS/AppleApp
Resource
macos-20260915-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amosstealer
C2
-
91.103.252.213:443
Attributes
-
uuid
4b6e10bc-21bc-44b1-8a24-f9e678343436
Targets
-
- Target jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
- Size 500KB
- SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
- MD5 557210da4efb41803a9fe9282398fcdc
- SHA1 09f70405fd6d652609b99b0b00b42f4f8c1bbdb9
- SHA512 316e72fd5334e663a1b90051b2552f137c352c504df31e3c54e045bb340981e80eea378188778f073766fd70474ea834c3f33f9c3fa409873efabd7c60311e40
- SSDEEP 12288:WXoJfAycbXpNU0bamorfNq4dYU1Uu65dRvwB1na+XyEfrWEN7wr:U9hbjtbrorFq0YUKLaXn3yhE
- TLSH T1DBB4237C993532C6DDB127B9AB5C91325CDA03F725A610F0E0B259BCCCDE705B490A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source_folder/AppleApp.app/Contents/MacOS/AppleApp
- Size 431KB
- SHA256 b174fea7be2ab4a99522245c2401a3dcabdbd8288b6ffd7cca9674579e9568ee
- MD5 ec1d23f8b49a936c9043d5be3c6cdf49
- SHA1 509234ccfa77ada7db066fc66eb15d489a526904
- SHA512 ff8fd6492085fdd7ea39ff416bba37dac39e8628fd1d5732a27521c4ce9bc392511319efe8cb08be93f8bdf5fd469076a355fbc09296bb26710f8234fa7a983c
- SSDEEP 6144:OoK+fhNBhAPZ9F7098y4wgvNjSmLVsrVGFqqk24wz:OovA9FM54wgFjSmLWVGF9l4wz
- TLSH T18A942A55932DF813E1D6E0B2BBC5C3E2E414F23405B0915F7B8997BABFB2A856816703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Prompts the user for their password using a hidden input dialog
Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.