General
- Target Keyscape_v1.5.0c_U2B.zip
- Size 68.3MB
- Sample261001-pbtsmswsfs
- SHA256 704141139e20b4ec047621599850f6138a7d49c7036639eae972d4e45903b4bb
- MD5 21049ec7d31b9f631aa8c5c8a53778cd
- SHA1 7b48238348f2d918762171060d5ce4a510628bbf
- SHA512 7db6afd4134ba16b7787ba9dbde39d459769f851428ae75f8b9d077544b10c71f0c038297549c32bfda39ddf44a19c5501166d99f75b38c3482276125ada3c58
- SSDEEP 1572864:d/6KAMUQQtG0F4Mxw+3QJ9muTrcehK6IveTZjQiwJw8NBLhiTBQ0MwFucKsSihO8:d/hAMUQQ1w+3Qnmufce462edjQi0wOir
- TLSH T14EF73354E637C34E2A666AD752E82ACF64292454C1E64DBEF785D016B1B3086CE3F30F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Spectrasonics - Keyscape v1.5.0c/Spectrasonics - Keyscape v1.5.0c.dmg
Resource
macos-20260915-en
Behavioral task
behavioral2
Sample
Keyscape MORiA/Keyscape Software Update MORiA.pkg
Resource
macos-20260915-en
Malware Config
Targets
-
- Target Spectrasonics - Keyscape v1.5.0c/Spectrasonics - Keyscape v1.5.0c.dmg
- Size 68.6MB
- SHA256 f10c18cee57ef7e6dd9326e11db126c50f05457a7923dda27c0b32dd3c4969cc
- MD5 1f726ba5c21475b72c75d52347058856
- SHA1 2e4d070c67984b709def03b4dc9e39e689fd59ee
- SHA512 445584909456189552a323117c50b785a043b0a44dcbdb2f67446cc605246246ef363bf2729738a560099b04acd9ca66b010aac1d009b79ed6e7e393ea547fc1
- SSDEEP 1572864:E4d1DRZhaXi0cEOn7hwPRGmx8AnyY0oBkcEblBiAqsljY7sGvLRMXUSBIi53UzYg:hdvZhas7hw5GmyYynoLEblsAqsNYgzP4
- TLSH T142F73371D1A3D50DFD67447542E4059AACAB2D7BD1C2C9E5FA92A00F90F3E85CA3F20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
-
- Target Keyscape MORiA/Keyscape Software Update MORiA.pkg
- Size 66.8MB
- SHA256 ac145b761a28dffe061f9df06193e5a054f7429482fd25021f3f49899988be07
- MD5 9758938505fe4a889c48a8b586b7fde7
- SHA1 08cd91836064d1874371669789a207083564bed2
- SHA512 7f4f077a63958ed208771a4251b8109fa92d2bf3980cd2543575164b291616b473592de3582f927c1653d430985d1d75ecc0c7f2d6e9be4856494e63adf9baaf
- SSDEEP 1572864:Y4dWDRZhaXymUEOn7hwPRGmx8AnyY0oBkcEblBiAqsljY7sGvLRMXUSBIi53Uznq:VdAZhag7hw5GmyYynoLEblsAqsNYgzPb
- TLSH T14CE7335590E3A60DFD37447983D409A5E0BB2D7AD1C1CAE6FB96A00F90E3D85C97F20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.