General
- Target svg
- Size 5KB
- Sample261011-ptqhya1xft
- SHA256 eeb8d1bbc609d269425c7545fc8eda8babcf70fa3cdaa97aad0ef227c5d32e92
- MD5 9a8ce4b301ea04f9f123f1306e05bc50
- SHA1 671e89092d58001b233ff94cc0c71417470d020b
- SHA512 ccb7e4f79743e41531c7f8c890314a169bfc4a300a6d3ff753d3904ee70090a8e83637e6dccaa6173d9da045ed75f14e164f37487773b86ad2ecd70ff7bb7d74
- SSDEEP 96:PNy+toXZzIEb0EaW87ykwYvLKZcHmw+atoQW6dC+0LZtKREu0aX7Yzueh8q0mw:PNDtkCBfxjKZ6mwHVClZtKSu0MUyY7w
- TLSH T19CC15EB39C315102CBFA579A44F733A8573275EA7A00E0DEDAD0876D96DEF1E9234284
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
svg.html
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
svg.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
svg.html
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral4
Sample
svg.html
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
svg.html
Resource
macos-20260915-en
Behavioral task
behavioral6
Sample
svg.html
Resource
debian12-armhf-20260513-en
Behavioral task
behavioral7
Sample
svg.html
Resource
debian12-mipsel-20260513-en
Behavioral task
behavioral8
Sample
svg.html
Resource
ubuntu2204-amd64-20260513-en
Behavioral task
behavioral9
Sample
svg.html
Resource
ubuntu2404-amd64-20260126-en
Malware Config
Targets
-
- Target svg
- Size 5KB
- SHA256 eeb8d1bbc609d269425c7545fc8eda8babcf70fa3cdaa97aad0ef227c5d32e92
- MD5 9a8ce4b301ea04f9f123f1306e05bc50
- SHA1 671e89092d58001b233ff94cc0c71417470d020b
- SHA512 ccb7e4f79743e41531c7f8c890314a169bfc4a300a6d3ff753d3904ee70090a8e83637e6dccaa6173d9da045ed75f14e164f37487773b86ad2ecd70ff7bb7d74
- SSDEEP 96:PNy+toXZzIEb0EaW87ykwYvLKZcHmw+atoQW6dC+0LZtKREu0aX7Yzueh8q0mw:PNDtkCBfxjKZ6mwHVClZtKSu0MUyY7w
- TLSH T19CC15EB39C315102CBFA579A44F733A8573275EA7A00E0DEDAD0876D96DEF1E9234284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Gatekeeper Bypass
Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.
-
File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Resource Forking
1Indicator Removal
1File Deletion
1Subvert Trust Controls
1Gatekeeper Bypass
1