General

  • Target
    jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
  • Size 500KB
  • Sample260922-m48fdscf88
  • SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • amosstealer

C2
  • 91.103.252.213:443

Attributes
  • uuid

    4b6e10bc-21bc-44b1-8a24-f9e678343436

Targets

    • Target
      jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
    • Size 500KB
    • SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      source_folder/AppleApp.app/Contents/MacOS/AppleApp
    • Size 431KB
    • SHA256 b174fea7be2ab4a99522245c2401a3dcabdbd8288b6ffd7cca9674579e9568ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Prompts the user for their password using a hidden input dialog

      Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.

MITRE ATT&CK Enterprise v16

Tasks