Overview

overview

10

Static

static

10

67fc8fa7d9....macho

macos-10.15-amd64

8

Resubmissions

27/10/2026, 16:29

261027-tzgkfasz9r10

27/10/2026, 16:25

261027-tw392aft3j

27/10/2026, 14:10

261027-rgvy1aev8m10

Sharing

Copy URL Twitter E-mail

General

  • Target
    67fc8fa7d9f844275afbbdf7fe3949074f3abb94319a774c0dcc9d5dfd9b1845.macho
  • Size 771KB
  • Sample261027-rgvy1aev8m
  • SHA256 67fc8fa7d9f844275afbbdf7fe3949074f3abb94319a774c0dcc9d5dfd9b1845
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
miolabcollectioncredential_accessdiscoveryexecutionmacosstealer

Malware Config

Extracted

Family

  • miolab

C2

  • https://lewokodwqko.icu

  • https://shopguoerve.pro

  • https://dfsjfisafosdikfos.info

  • https://isosissisisossfiof.com

Targets

    • Target
      67fc8fa7d9f844275afbbdf7fe3949074f3abb94319a774c0dcc9d5dfd9b1845.macho
    • Size 771KB
    • SHA256 67fc8fa7d9f844275afbbdf7fe3949074f3abb94319a774c0dcc9d5dfd9b1845
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    collectioncredential_accessdiscoveryexecution

    • Identifies hardware specifics through system_profiler

    • Prompts the user for their password using a hidden input dialog

      Adversaries may mimic a system prompt to capture a user's password through a GUI dialog with masked input.

      credential_accesscollection
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks