General
- Target jaffacakes118_d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272.bin
- Size 500KB
- Sample260922-nav4msvanc
- SHA256 d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272
- MD5 ac7e30ee0c6a68363d7383cf62496d34
- SHA1 56c55d234a02ec39b25afd622be35e0e8ec5316f
- SHA512 c86a859fb7ebec44e183c7e2ae0adb59a0bf8664328a1762529cdb5344041f65f5ae56fd1bdb479af9565d286f4b576c15d3acf63823bb399fe425d3649090dd
- SSDEEP 12288:WXoJfAycbXpNU0bamorfNq4dYU1Uu65dRvwB1na+XyEfrWEN7wr:U9hbjtbrorFq0YUKLaXn3yhE
- TLSH T1E6B4237C993532C6DDB127B9AB5C91325CDA03F725A610F0E0B259BCCCDE709B490A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272.bin
Resource
macos-20260915-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
source_folder/AppleApp.app/Contents/MacOS/AppleApp
Resource
macos-20260915-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
amosstealer
C2
-
91.103.252.213:443
Attributes
-
uuid
4b6e10bc-21bc-44b1-8a24-f9e678343436
Targets
-
- Target jaffacakes118_d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272.bin
- Size 500KB
- SHA256 d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272
- MD5 ac7e30ee0c6a68363d7383cf62496d34
- SHA1 56c55d234a02ec39b25afd622be35e0e8ec5316f
- SHA512 c86a859fb7ebec44e183c7e2ae0adb59a0bf8664328a1762529cdb5344041f65f5ae56fd1bdb479af9565d286f4b576c15d3acf63823bb399fe425d3649090dd
- SSDEEP 12288:WXoJfAycbXpNU0bamorfNq4dYU1Uu65dRvwB1na+XyEfrWEN7wr:U9hbjtbrorFq0YUKLaXn3yhE
- TLSH T1E6B4237C993532C6DDB127B9AB5C91325CDA03F725A610F0E0B259BCCCDE709B490A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source_folder/AppleApp.app/Contents/MacOS/AppleApp
- Size 431KB
- SHA256 b174fea7be2ab4a99522245c2401a3dcabdbd8288b6ffd7cca9674579e9568ee
- MD5 ec1d23f8b49a936c9043d5be3c6cdf49
- SHA1 509234ccfa77ada7db066fc66eb15d489a526904
- SHA512 ff8fd6492085fdd7ea39ff416bba37dac39e8628fd1d5732a27521c4ce9bc392511319efe8cb08be93f8bdf5fd469076a355fbc09296bb26710f8234fa7a983c
- SSDEEP 6144:OoK+fhNBhAPZ9F7098y4wgvNjSmLVsrVGFqqk24wz:OovA9FM54wgFjSmLWVGF9l4wz
- TLSH T18A942A55932DF813E1D6E0B2BBC5C3E2E414F23405B0915F7B8997BABFB2A856816703
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Prompts the user for their password using a hidden input dialog
Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.