General

  • Target
    jaffacakes118_d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272.bin
  • Size 500KB
  • Sample260922-nav4msvanc
  • SHA256 d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • amosstealer

C2
  • 91.103.252.213:443

Attributes
  • uuid

    4b6e10bc-21bc-44b1-8a24-f9e678343436

Targets

    • Target
      jaffacakes118_d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272.bin
    • Size 500KB
    • SHA256 d759b8b77934e779c817bb04bca33726c5fa65b6e55d254ad7293570ca521272
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      source_folder/AppleApp.app/Contents/MacOS/AppleApp
    • Size 431KB
    • SHA256 b174fea7be2ab4a99522245c2401a3dcabdbd8288b6ffd7cca9674579e9568ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Prompts the user for their password using a hidden input dialog

      Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.

MITRE ATT&CK Enterprise v16

Tasks