e292dde92b26226ce9a566d738ad82eaca6c704d4a975ad2a8ce0e6838b07f6d

General

Target
e292dde92b26226ce9a566d738ad82eaca6c704d4a975ad2a8ce0e6838b07f6d.dmg
Size 654KB
Sample260922-w71dmax1dy
SHA256 e292dde92b26226ce9a566d738ad82eaca6c704d4a975ad2a8ce0e6838b07f6d
MD5 50966a9dc123876c05df6a2cb646517e
SHA1 e2bad1be46b347b3ff7f69e14e49426e0a4ccb16
SHA512 48913ef33ab4b8679692ba436330c11f7fb0f35355fa99521f2be3874cf09968a193f3ceda3a5ebee7ebfe9d1119fbfccf55d531aca5b9544ab7430c7de68230
SSDEEP 6144:Okr1NZmj6zgjKb14u8fs8EYbxeqHIz7Q+CroKeUXIINf6qOQsG3zocr:OkrnZe6zgvu8fsIxeqMU18RANSq738y
TLSH
T1B9E48D37AE695D84EF551FFF8122D5A18CD8E9C7A065C4E0BC400900BEE9BD4F9687A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  e292dde92b26226ce9a566d738ad82eaca6c704d4a975ad2a8ce0e6838b07f6d.dmg
- Size 654KB
- SHA256 e292dde92b26226ce9a566d738ad82eaca6c704d4a975ad2a8ce0e6838b07f6d
- MD5 50966a9dc123876c05df6a2cb646517e
- SHA1 e2bad1be46b347b3ff7f69e14e49426e0a4ccb16
- SHA512 48913ef33ab4b8679692ba436330c11f7fb0f35355fa99521f2be3874cf09968a193f3ceda3a5ebee7ebfe9d1119fbfccf55d531aca5b9544ab7430c7de68230
- SSDEEP 6144:Okr1NZmj6zgjKb14u8fs8EYbxeqHIz7Q+CroKeUXIINf6qOQsG3zocr:OkrnZe6zgvu8fsIxeqMU18RANSq738y
- TLSH
  T1B9E48D37AE695D84EF551FFF8122D5A18CD8E9C7A065C4E0BC400900BEE9BD4F9687A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  CursorSense/CursorSense.app/Contents/MacOS/CursorSense
- Size 706KB
- SHA256 77afbc54df498ec2529e652f601a11ea711857990ed91f234a7e30b6b4c46c95
- MD5 d419873a293a99780fc531506ac358b3
- SHA1 fa1d148f086adca6be5a7548b285e8a7cccd9a26
- SHA512 99381568848fabc7f8722ed4ccb1346b6b425722ef363016af7a7e83699680f5736e210659272c72c6ad956cd71c1a1fd1efed9cb15cfe359b3a0e2b794faf57
- SSDEEP 12288:tU7wAcpxXAIIETE1UWLwJrr1nuwyqPUcyvmByHaRR1L+:tU7RyAOTtovPaRW
- TLSH
  T153F42AAB527AA4D4EC4732747B8A3BF7EE40B47663F5E4A9AA42513448F3374913021F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access discovery execution
- Identifies hardware specifics through system_profiler
- Prompts the user for their password using a hidden input dialog
  Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.
  credential_access collection
behavioral2