Extracted

• • Target
    6bb01878ea61187c9810aba9c0c0e1a0003d5071a89fdddb46ad0348e5f3ee05
  • Size 605KB
  • SHA256 6bb01878ea61187c9810aba9c0c0e1a0003d5071a89fdddb46ad0348e5f3ee05
  • MD5 75225f1bb13b7618fef070e7c4f2b000
  • SHA1 b60d74b8598b31c5763bb294af055ddc1c766760
  • SHA512 865bf58ad2de5823c5f2da0a6c6ebd337e1e88006901cc61e8777f55b7e7a67359ac6f7f30010dc5b6beb5eeca9f7b34936afceeb69cb4b73448b469a58ed5c7
  • SSDEEP 6144:KUCZMxzZQqEPd3emqXXZjl90k+ifvM/jKF6dvd2c6MRR+i9YClJFw:Khw9PEUnFl9h+iXM/jKF6Zd2hR1ClJF
  • TLSH
    T12FD47D376E695C84DF550FFF8231D5A28DD9EA83A0A5C0E5BC400901BEE8BD4F9587A3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  4^/10

  defense_evasion
  behavioral1
• • Target
    WidgetFlow/WidgetFlow.app/Contents/MacOS/WidgetFlow
  • Size 706KB
  • SHA256 cf0358c53e99d2e77b49d6b23c7ca1c103a6af8a413604afb73ae29884e5296a
  • MD5 d1209dabafcd496ba005a6d34d02a26e
  • SHA1 74ade93e638e48b84b6ce3cc2a519e1240b6f97d
  • SHA512 38bc0bc17970710233e5603a8c01527250f3597de9c3f72ed1bc65d0bd483cca7fde8f0a486055d2f857100d09a3eb58132bb3bfe1e7e843eaf5704735e2ed35
  • SSDEEP 12288:tU7wAcpxXAIIETE1UWLwJrr1nuwymPUcyvmByHaRR1L+:tU7RyAOTtEvPaRW
  • TLSH
    T151F42AAB527AA4D4EC4732747B8A3BF7EE40B47663F5E4A9AA42513448F3374913021F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdiscoveryexecution

  • Identifies hardware specifics through system_profiler

  • Prompts the user for their password using a hidden input dialog

    Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.

    credential_accesscollection
  behavioral2