Overview

overview

10

Static

static

10

jaffacakes...d3.bin

macos-10.15-amd64

1

source_fol...pleApp

macos-10.15-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
  • Size 500KB
  • Sample260922-m48fdscf88
  • SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
stealeramosstealer

Malware Config

Extracted

Family

  • amosstealer

C2

  • 91.103.252.213:443

Attributes
  • uuid

    4b6e10bc-21bc-44b1-8a24-f9e678343436

Signatures

  • Family: AmosStealer, Atomic

    AmosStealer aka Atomic is MacOS stealer malware.

    stealeramosstealer

File Explorer

  • jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin
    .dmg 500KB
  • source_folder/.DS_Store
    10KB
  • source_folder/.DropDMGBackground/background.png
    .png 250KB
  • source_folder/.DropDMGBackground/background.png:com.apple.provenance
    11B
  • source_folder/.DropDMGBackground:com.apple.provenance
    11B
  • source_folder/.fseventsd/00000000023db1c2
    .gz 167B
  • 00000000023db1c2
    383B
  • source_folder/.fseventsd/00000000023db1c3
    .gz 72B
  • 00000000023db1c3
    58B
  • source_folder/.fseventsd/00000000023db2d0
    .gz 178B
  • 00000000023db2d0
    278B
  • source_folder/.fseventsd/00000000023db2d1
    .gz 72B
  • 00000000023db2d1
    58B
  • source_folder/.fseventsd/00000000023db326
    .gz 67B
  • 00000000023db326
    63B
  • source_folder/.fseventsd/00000000023db327
    .gz 72B
  • 00000000023db327
    58B
  • source_folder/.fseventsd/fseventsd-uuid
    36B
  • source_folder/.journal
    512KB
  • source_folder/.journal_info_block
    4KB
  • source_folder/AppleApp.app/Contents/Info.plist
    .xml 326B
  • source_folder/AppleApp.app/Contents/Info.plist:com.apple.provenance
    11B
  • source_folder/AppleApp.app/Contents/MacOS/AppleApp
    .macho 431KB
  • source_folder/AppleApp.app/Contents/MacOS/AppleApp:com.apple.provenance
    11B
  • source_folder/AppleApp.app/Contents/MacOS:com.apple.provenance
    11B
  • source_folder/AppleApp.app/Contents/Resources/AppIcon.icns
    .png 109KB
  • source_folder/AppleApp.app/Contents/Resources/AppIcon.icns:com.apple.provenance
    11B
  • source_folder/AppleApp.app/Contents/Resources:com.apple.provenance
    11B
  • source_folder/AppleApp.app/Contents:com.apple.provenance
    11B
  • source_folder/AppleApp.app:com.apple.provenance
    11B
  • source_folder:com.apple.provenance
    11B

jaffacakes118_baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3.bin

  • SHA256 baaaa6b50b215aa38a66183ffc49e5bff6371f3d4f5dae7c3bf8d41d5c30a2d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
macos