372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0

General

Target
372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0.unknown
Size 617KB
Sample260928-19rayswsds
SHA256 372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0
MD5 f634cf73d9541c0c5233e0f05265e0ad
SHA1 62f1bfa113830ec2bd915d9e36088860f0e6e5b0
SHA512 896dfa78c6a5bc955d510bbb9d3a8f5e174ba1f876e4bdacc86160ea21a9920336b518692677891cec13f512955e74425f6d3224b2cb7f5cef9f260d96feed11
SSDEEP 12288:gkPtZGv2RvlH+9X28ucvP0smHTJ/P8OEwbT5UdGnjZ:gkPrGv2Rvle28h0smzA8qoZ
TLSH
T1A7D48D37AE695D84DF951FFF8232D5668DD8A9C3A0A5C0E1BC400940BEE8BC0F958767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0.unknown
- Size 617KB
- SHA256 372f8b3b401bdc36a03a0c9bcbddb8d7e70c00b5c5c9f84912cc00361f4eb8a0
- MD5 f634cf73d9541c0c5233e0f05265e0ad
- SHA1 62f1bfa113830ec2bd915d9e36088860f0e6e5b0
- SHA512 896dfa78c6a5bc955d510bbb9d3a8f5e174ba1f876e4bdacc86160ea21a9920336b518692677891cec13f512955e74425f6d3224b2cb7f5cef9f260d96feed11
- SSDEEP 12288:gkPtZGv2RvlH+9X28ucvP0smHTJ/P8OEwbT5UdGnjZ:gkPrGv2Rvle28h0smzA8qoZ
- TLSH
  T1A7D48D37AE695D84DF951FFF8232D5668DD8A9C3A0A5C0E1BC400940BEE8BC0F958767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  ScreenMemory/ScreenMemory.app/Contents/MacOS/ScreenMemory
- Size 706KB
- SHA256 a1f38cb9f8c856754accd0c2ae2ff3ae10492a73926a9d6f13be3219413818be
- MD5 6e15ab27060c9e77ec252bcf3d8eeb8c
- SHA1 a737c7c78b42a1879bd02c2fb19fbdea37af8fcd
- SHA512 0126b7086ca43c676730eb29daa54d1695fc95817d42d287c0d74d98fefc568effaa0b60e2899fb9b5d0734ab74ceead2a504814298e5b86ba905553ceb079a3
- SSDEEP 12288:tU7wAcpxXAIIETE1UWLwJrr1nuwyUPUcyvmByHaRR1L+:tU7RyAOTtevPaRW
- TLSH
  T1FEF42AAB527AA4D4EC4732747B8A3BF7EE40B47663F5E4A9AA42513448F3374913021F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery execution
- Identifies hardware specifics through system_profiler
- Prompts the user for their password using a hidden input dialog
  Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.
  credential_access collection
behavioral2